Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Openswan 远程拒绝服务漏洞
Vulnerability Description
Xelerance Openswan是加拿大Xelerance公司的一个基于FreeS/WAN项目的用于Linux系统下的IPSEC实现，它主要用于保证数据传输中的安全性、完整性等问题。 Openswan 2.6.29到2.6.35版本中存在远程拒绝服务漏洞。由于空指针解引用情况，攻击者可利用该漏洞使应用程序崩溃，导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A