CVE-2011-4073

Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service (pluto IKE daemon crash) via vectors related to the (1) quick_outI1_continue and (2) quick_outI1 functions.

• CWE-399

• http://secunia.com/advisories/46678Vendor Advisory
• http://secunia.com/advisories/46681Vendor Advisory
• http://secunia.com/advisories/47342Vendor Advisory
• http://www.debian.org/security/2011/dsa-2374
• http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txt
• http://www.redhat.com/support/errata/RHSA-2011-1422.html
• http://www.securityfocus.com/bid/50440
• http://www.securitytracker.com/id?1026268
• http://secunia.com/advisories/46678Vendor Advisory
• http://secunia.com/advisories/46681Vendor Advisory
• http://secunia.com/advisories/47342Vendor Advisory
• http://www.debian.org/security/2011/dsa-2374
• http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txt
• http://www.redhat.com/support/errata/RHSA-2011-1422.html
• http://www.securityfocus.com/bid/50440
• http://www.securitytracker.com/id?1026268

Published

Nov 17, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4063chan_sip.c in the SIP channel driver in Asterisk Open Source…
• CVE-2011-4064Cross-site scripting (XSS) vulnerability in the setup interf…
• CVE-2011-4066SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.0…
• CVE-2011-4068The check_password function in html/admin/login.php in Packe…
• CVE-2011-4069html/admin/login.php in PacketFence before 3.0.2 allows remo…
• CVE-2011-4072Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-4074Cross-site scripting (XSS) vulnerability in cmd.php in phpLD…
• CVE-2011-4075The masort function in lib/functions.php in phpLDAPadmin 1.2…
• CVE-2011-4076OpenStack Nova before 2012.1 allows someone with access to a…5.9
• CVE-2011-4077Buffer overflow in the xfs_readlink function in fs/xfs/xfs_v…
• CVE-2011-4078include/iniset.php in Roundcube Webmail 0.5.4 and earlier, w…
• CVE-2011-4079Off-by-one error in the UTF8StringNormalize function in Open…