https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-3671.htmlhttps://patchthecve.com/cve/CVE-2005-3671.htmlTue, 16 Jun 2026 22:17:23 +0000HIGH 7.8: The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs whehttps://patchthecve.com/cve/CVE-2004-0590.htmlhttps://patchthecve.com/cve/CVE-2004-0590.htmlTue, 16 Jun 2026 22:05:56 +0000HIGH 10.0: FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certihttps://patchthecve.com/cve/CVE-2002-0666.htmlhttps://patchthecve.com/cve/CVE-2002-0666.htmlTue, 16 Jun 2026 21:57:54 +0000MEDIUM 5.0: IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors