CVE-2013-6466

mediumpriority · track · 21EPSS 0.027 · 86 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.66% (86th) EPSS
CVSS 5 · medium
Is it mine?
233 products
Check your exposure
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-28

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedopenswan-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.src as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-0:2.6.32-7.3.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-7.3.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-7.3.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-7.3.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-7.3.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-7.3.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-7.3.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-debuginfo-0:2.6.32-7.3.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-27.2.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-7.3.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-7.3.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-7.3.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-7.3.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-7.3.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-7.3.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Fixedopenswan-doc-0:2.6.32-7.3.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0185
  • Mitigationphoenix_contact_psirt

    PHOENIX CONTACT and Innominate recommend all customers running mGuard devices with affected firmware versions to update to firmware version 8.5.2 or higher, which fixes this vulnerability. Updates can be found on the vendor's 'Downloads' page for each of the affected devices.

  • MitigationFL MGUARD CENTERPORTcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD DELTA TX/TXcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD DELTA TX/TX VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD GT/GTcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD GT/GT VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD PCI4000cisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD PCI4000 VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD PCIE4000 VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RScisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS VPN ANALOGcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS2000 TX/TX VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS2005 TX VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS4000 TX/TXcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS4000 TX/TX VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS4000 TX/TX VPN-Mcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS4000 TX/TX-Pcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS4004 TX/DTXcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD RS4004 TX/DTX VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD SMART2cisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationFL MGUARD SMART2 VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationTC MGUARD RS2000 3G VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationTC MGUARD RS2000 4G VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationTC MGUARD RS4000 3G VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
  • MitigationTC MGUARD RS4000 4G VPNcisa_csaf_ot

    PHOENIX CONTACT and Innominate Security Technologies recommend all users running mGuard devices with affected firmware versions to update to firmware Version 8.5.2 or higher, which fixes this vulnerability. Links to updates and additional information can be found in the CERT@VDE advisory at the following location:

    https://cert.vde.com/de-de/advisories/vde-2017-001
02

cvss

Technical severity, 0–10. One row per scoring source.

7.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9
v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Psecondary · FSTEC (BDU) RU
v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Psecondary · Phoenix Contact PSIRT DE
v2.04.3mediumAV:N/AC:L/Au:N/C:N/I:N/A:P/E:Usecondary · CVSS-BT (t0sche)
v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Psecondary · Red Hat Product Security US
v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
03

weaknesses

The CWE weakness classes this flaw belongs to.

04

affected products (233)

Products and version ranges known to be affected.

showing 20 of 233
05

advisories (3)

Vendor and ecosystem advisories describing this.

  • RHSA-2014:0185Red Hat Security Advisory: openswan security update2014-02-18csaf · redhat_csafUS

    Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

  • VDE-2017-001PHOENIX CONTACT: mGuard IKE daemon remote denial of service2017-03-07csaf · phoenix_contact_psirtDE

    Openswan 2.6.39 and earlier, which is used in the mGuard firmware version 8.0.0 to 8.5.1, allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.

  • ICSA-17-250-02PHOENIX CONTACT, Innominate Security Technologies mGuard Firmware2017-09-07icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

06

also known as (5)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

08

references (18)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan