Skip to content
OpenAdvisories
Unscored DSA-1760-1 2 CVEs

openswan - denial of service

Published Mar 30, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 openswan 1:2.4.6+dfsg.2-1.1+etch1
Debian · 5.0 openswan 1:2.4.12+dfsg-1.3+lenny1

Vulnerabilities 2

  • Unscored —
    CVE-2008-4190 Public exploit

    The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbit…

  • Unscored —

    The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 befor…