PatchTheCVEinternet key exchange vulnerabilities
Recent CVEs affecting internet key exchange products. 5 tracked.
internet key exchange has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-05-10. Highest priority: CVE-2005-3666 (score 57/100).
- CVE-2006-2298 MEDIUM 5.0 DOWNGRADE The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows re
- CVE-2006-1646 MEDIUM 5.0 DOWNGRADE The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project r
- CVE-2005-3668 MEDIUM 5.0 DOWNGRADE Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) h
- CVE-2005-3667 MEDIUM 5.0 DOWNGRADE Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version
- CVE-2005-3666 HIGH 10.0 DOWNGRADE Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exc
FAQ
How do I fix internet key exchange vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is internet key exchange being exploited right now?
None of the tracked internet key exchange CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which internet key exchange CVE should I patch first?
CVE-2005-3666 currently ranks highest (57/100): Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exc.