Description
Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | openswan +1 | 2.6.32-4.el6_1.2 | RHSA-2011:1356 |
Advisories 1
- RHSA-2011:1356 Red Hat Security Advisory: openswan security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- http://www.openswan.org/download/CVE-2011-3380/CVE-2011-3380.txt
- 46306 third-party-advisory
- RHSA-2011:1356 vendor-advisory