CVE-2011-4073
N/A
Published: November 17, 2011 at 07:00 PM UTC
Updated: June 16, 2026 at 11:34 PM UTC
1 product affected across 1 vendorOpenswan
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.3.02.3.12.4.02.4.12.4.102.4.112.4.122.4.132.4.22.4.32.4.42.4.52.4.62.4.72.4.82.4.92.5.02.5.0 sbs42.5.0 sbs52.5.012.5.022.5.032.5.042.5.052.5.062.5.072.5.082.5.092.5.102.5.112.5.122.5.132.5.142.5.152.5.162.5.172.5.182.6.012.6.022.6.032.6.042.6.052.6.062.6.072.6.082.6.092.6.102.6.112.6.122.6.132.6.142.6.152.6.162.6.172.6.182.6.192.6.202.6.212.6.222.6.232.6.242.6.252.6.262.6.272.6.282.6.292.6.302.6.312.6.322.6.332.6.342.6.352.6.36
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/46678Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/46681Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/47342Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2011/dsa-2374x_refsource_CONFIRM
Source: [email protected]
http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txtVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://www.redhat.com/support/errata/RHSA-2011-1422.htmlQuick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card