Description
Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | openswan | 1:2.6.37-3+deb7u1 | DSA-2893-1 |
| Debian 6.0 | openswan | 1:2.6.28+dfsg-5+squeeze2 | DSA-2893-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | openswan +1 | 2.6.32-27.2.el6_5 | RHSA-2014:0185 |
| RHEL 5 | openswan +1 | 2.6.32-7.3.el5_10 | RHSA-2014:0185 |
Advisories 4
- RHSA-2014:0185 Red Hat Security Advisory: openswan security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2893-1 openswan - security update Debian Security (DSA / DLA) · Mar 9, 2026
- VDE-2017-001 PHOENIX CONTACT: mGuard IKE daemon remote denial of service CERT@VDE · May 22, 2025
- ICSA-17-250-02 PHOENIX CONTACT, Innominate Security Technologies mGuard Firmware CISA ICS & IT advisories · Sep 7, 2017
References
- https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt
- 65155 vdb-entry
- https://cert.vde.com/en-us/advisories/vde-2017-001
- RHSA-2014:0185 vendor-advisory
- DSA-2893 vendor-advisory
- openswan-cve20136466-dos(90524) vdb-entry