The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openswan-docUpgrade openswan | Dec 1, 2016 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade net-misc/openswan. | Oct 30, 2017 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade openswan-docUpgrade openswan | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade openswanUpgrade openswan-doc | Aug 9, 2024 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub