PatchTheCVEopenswan vulnerabilities
Recent CVEs affecting openswan products. 6 tracked.
openswan has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2011-05-20. Highest priority: CVE-2004-0590 (score 57/100).
- CVE-2011-2147 LOW 3.6 DOWNGRADE Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in th
- CVE-2008-4966 MEDIUM 6.9 DOWNGRADE linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/s
- CVE-2008-4190 MEDIUM 4.4 DOWNGRADE DOWNGRADE The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwr
- CVE-2005-3671 HIGH 7.8 DOWNGRADE DOWNGRADE The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freesw
- CVE-2005-0162 HIGH 7.2 UPGRADE DOWNGRADE Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x b
- CVE-2004-0590 HIGH 10.0 DOWNGRADE DOWNGRADE FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, open
FAQ
How do I fix openswan vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openswan being exploited right now?
None of the tracked openswan CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openswan CVE should I patch first?
CVE-2004-0590 currently ranks highest (57/100): FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, open.