Описание
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | not-affected | 1:2.6.37-1 |
| hardy | not-affected | |
| jaunty | ignored | end of life |
| karmic | ignored | end of life |
| lucid | not-affected | 1:2.6.23+dfsg-1ubuntu1 |
| maverick | ignored | end of life |
| natty | not-affected | 1:2.6.28+dfsg-2 |
| oneiric | not-affected | 1:2.6.28+dfsg-2 |
| upstream | released | 2.6.29 |
Показывать по
EPSS
6.5 Medium
CVSS2
Связанные уязвимости
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2. ...
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.
EPSS
6.5 Medium
CVSS2