Unscored CVE-2014-2037 EUVD-2014-2089GHSA-4v68-wgfw-m69v

Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets th…

Published Nov 26, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads. NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466.

References

[oss-security] 20140217 Re: CVE request for unfixed CVE-2013-6466 in openswan-2.6.40 mailing-list
[Openswan Users] 20140221 Openswan 2.6.41 released mailing-list
[oss-security] 20140220 Re: CVE request for unfixed CVE-2013-6466 in openswan-2.6.40 mailing-list
65629 vdb-entry