CVE-2011-4073: Use After Free
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quickoutI1continue and (2) quickoutI1 functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4073?
CVE-2011-4073 has a severity rating of medium, indicating it could lead to a denial of service but is not critical.
How do I fix CVE-2011-4073?
To fix CVE-2011-4073, upgrade Openswan to the latest version available beyond 2.6.36.
What types of attacks exploit CVE-2011-4073?
CVE-2011-4073 can be exploited by remote authenticated users to cause the pluto IKE daemon to crash.
Which versions of Openswan are affected by CVE-2011-4073?
CVE-2011-4073 affects Openswan versions 2.3.0 through 2.6.36.
Is CVE-2011-4073 a remote or local vulnerability?
CVE-2011-4073 is considered a remote vulnerability as it can be exploited by authenticated users from a remote location.