Lucene search
HistoryNov 26, 2014 - 3:59 p.m.
CVE-2014-2037
openswan
2.6.40
remote attackers
denial of service
cve-2014-2037
null pointer dereference
ike daemon restart
ikev2 packets
incomplete fix
cve-2013-6466
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.9%
Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads. NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466.
Affected configurations
Node
xeleranceopenswanMatch2.6.40
| CPE | Name | Operator | Version |
|---|---|---|---|
| xelerance:openswan | xelerance openswan | eq | 2.6.40 |
Related
nvd
nvd
CVE-2014-2037
2014-11-26 15:59:00
cvelist
cvelist
CVE-2014-2037
2014-11-26 15:00:00
prion
prion
Null pointer dereference
2014-11-26 15:59:00
ubuntucve
ubuntucve
CVE-2014-2037
2014-11-26 00:00:00
CVE-2013-6466
2014-01-26 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.9%
Related for CVE-2014-2037