5

CVE-2009-0790

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Strongswan ≫ Strongswan Version2.4.0
Strongswan ≫ Strongswan Version2.4.0a
Strongswan ≫ Strongswan Version2.4.1
Strongswan ≫ Strongswan Version2.4.2
Strongswan ≫ Strongswan Version2.4.3
Strongswan ≫ Strongswan Version2.4.4
Strongswan ≫ Strongswan Version2.6.0
Strongswan ≫ Strongswan Version2.6.1
Strongswan ≫ Strongswan Version2.6.2
Strongswan ≫ Strongswan Version2.6.3
Strongswan ≫ Strongswan Version2.6.4
Strongswan ≫ Strongswan Version2.8.0
Strongswan ≫ Strongswan Version2.8.1
Strongswan ≫ Strongswan Version2.8.2
Strongswan ≫ Strongswan Version2.8.3
Strongswan ≫ Strongswan Version2.8.4
Strongswan ≫ Strongswan Version2.8.5
Strongswan ≫ Strongswan Version2.8.6
Strongswan ≫ Strongswan Version2.8.7
Strongswan ≫ Strongswan Version2.8.8
Strongswan ≫ Strongswan Version4.2.0
Strongswan ≫ Strongswan Version4.2.1
Strongswan ≫ Strongswan Version4.2.2
Strongswan ≫ Strongswan Version4.2.3
Strongswan ≫ Strongswan Version4.2.4
Strongswan ≫ Strongswan Version4.2.5
Strongswan ≫ Strongswan Version4.2.6
Strongswan ≫ Strongswan Version4.2.7
Strongswan ≫ Strongswan Version4.2.8
Strongswan ≫ Strongswan Version4.2.9
Strongswan ≫ Strongswan Version4.2.10
Strongswan ≫ Strongswan Version4.2.11
Strongswan ≫ Strongswan Version4.2.12
Strongswan ≫ Strongswan Version4.2.13
Xelerance ≫ Openswan Version2.4.0
Xelerance ≫ Openswan Version2.4.1
Xelerance ≫ Openswan Version2.4.2
Xelerance ≫ Openswan Version2.4.3
Xelerance ≫ Openswan Version2.4.4
Xelerance ≫ Openswan Version2.4.5
Xelerance ≫ Openswan Version2.4.9
Xelerance ≫ Openswan Version2.4.10
Xelerance ≫ Openswan Version2.6.03
Xelerance ≫ Openswan Version2.6.04
Xelerance ≫ Openswan Version2.6.05
Xelerance ≫ Openswan Version2.6.06
Xelerance ≫ Openswan Version2.6.07
Xelerance ≫ Openswan Version2.6.08
Xelerance ≫ Openswan Version2.6.09
Xelerance ≫ Openswan Version2.6.10
Xelerance ≫ Openswan Version2.6.11
Xelerance ≫ Openswan Version2.6.12
Xelerance ≫ Openswan Version2.6.13
Xelerance ≫ Openswan Version2.6.14
Xelerance ≫ Openswan Version2.6.15
Xelerance ≫ Openswan Version2.6.16
Xelerance ≫ Openswan Version2.6.17
Xelerance ≫ Openswan Version2.6.18
Xelerance ≫ Openswan Version2.6.19
Xelerance ≫ Openswan Version2.6.20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.21% 0.866
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/34472
Vendor Advisory
http://www.debian.org/security/2009/dsa-1760
Patch
http://www.redhat.com/support/errata/RHSA-2009-0402.html
http://download.strongswan.org/CHANGES4.txt
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://secunia.com/advisories/34483
Vendor Advisory
http://secunia.com/advisories/34494
Vendor Advisory
http://secunia.com/advisories/34546
Vendor Advisory
http://www.debian.org/security/2009/dsa-1759
Patch
http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txt
Vendor Advisory
http://www.securityfocus.com/archive/1/502270/100/0/threaded
http://www.securityfocus.com/bid/34296
Patch
http://www.securitytracker.com/id?1021949
http://www.securitytracker.com/id?1021950
http://www.vupen.com/english/advisories/2009/0886
https://exchange.xforce.ibmcloud.com/vulnerabilities/49523
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171