CVE-2011-3380: Null Pointer Dereference

Published Nov 17, 2011

Updated

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEYLENGTH attribute, which is not properly handled by the error handling function.

Affected Software

7 affected components

Xelerance Openswan=2.6.29

Xelerance Openswan=2.6.30

Xelerance Openswan=2.6.31

Xelerance Openswan=2.6.32

Xelerance Openswan=2.6.33

Xelerance Openswan=2.6.34

Xelerance Openswan=2.6.35

Remediation

Patch Available

http://www.openswan.org/download/CVE-2011-3380/CVE-2011-3380.txt

Event History

Nov 17, 2011

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3380?

CVE-2011-3380 has been classified as a moderate severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2011-3380?

To fix CVE-2011-3380, update your Openswan installation to version 2.6.36 or later, which addresses the vulnerability.

What software versions are affected by CVE-2011-3380?

CVE-2011-3380 affects Openswan versions 2.6.29 through 2.6.35.

What type of attack does CVE-2011-3380 involve?

CVE-2011-3380 involves a denial of service attack caused by a NULL pointer dereference due to an invalid KEY_LENGTH attribute.

Can CVE-2011-3380 be exploited remotely?

Yes, CVE-2011-3380 can be exploited remotely by sending a specially crafted ISAKMP message.