VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Nov 17, 2011· Updated Apr 29, 2026

CVE-2011-3380

CVE-2011-3380

Description

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.

Affected products

7
  • Xelerance/Openswan7 versions
    cpe:2.3:a:xelerance:openswan:2.6.29:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:xelerance:openswan:2.6.29:*:*:*:*:*:*:*
    • cpe:2.3:a:xelerance:openswan:2.6.30:*:*:*:*:*:*:*
    • cpe:2.3:a:xelerance:openswan:2.6.31:*:*:*:*:*:*:*
    • cpe:2.3:a:xelerance:openswan:2.6.32:*:*:*:*:*:*:*
    • cpe:2.3:a:xelerance:openswan:2.6.33:*:*:*:*:*:*:*
    • cpe:2.3:a:xelerance:openswan:2.6.34:*:*:*:*:*:*:*
    • cpe:2.3:a:xelerance:openswan:2.6.35:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.