CVE-2009-0790
EUVD-2009-078801.04.2009, 10:30
The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| strongswan | strongswan | 2.4.0 |
| strongswan | strongswan | 2.4.0a:a |
| strongswan | strongswan | 2.4.1 |
| strongswan | strongswan | 2.4.2 |
| strongswan | strongswan | 2.4.3 |
| strongswan | strongswan | 2.4.4 |
| strongswan | strongswan | 2.6.0 |
| strongswan | strongswan | 2.6.1 |
| strongswan | strongswan | 2.6.2 |
| strongswan | strongswan | 2.6.3 |
| strongswan | strongswan | 2.6.4 |
| strongswan | strongswan | 2.8.0 |
| strongswan | strongswan | 2.8.1 |
| strongswan | strongswan | 2.8.2 |
| strongswan | strongswan | 2.8.3 |
| strongswan | strongswan | 2.8.4 |
| strongswan | strongswan | 2.8.5 |
| strongswan | strongswan | 2.8.6 |
| strongswan | strongswan | 2.8.7 |
| strongswan | strongswan | 2.8.8 |
| strongswan | strongswan | 4.2.0 |
| strongswan | strongswan | 4.2.1 |
| strongswan | strongswan | 4.2.2 |
| strongswan | strongswan | 4.2.3 |
| strongswan | strongswan | 4.2.4 |
| strongswan | strongswan | 4.2.5 |
| strongswan | strongswan | 4.2.6 |
| strongswan | strongswan | 4.2.7 |
| strongswan | strongswan | 4.2.8 |
| strongswan | strongswan | 4.2.9 |
| strongswan | strongswan | 4.2.10 |
| strongswan | strongswan | 4.2.11 |
| strongswan | strongswan | 4.2.12 |
| strongswan | strongswan | 4.2.13 |
| xelerance | openswan | 2.4.0 |
| xelerance | openswan | 2.4.1 |
| xelerance | openswan | 2.4.2 |
| xelerance | openswan | 2.4.3 |
| xelerance | openswan | 2.4.4 |
| xelerance | openswan | 2.4.5 |
| xelerance | openswan | 2.4.9 |
| xelerance | openswan | 2.4.10 |
| xelerance | openswan | 2.6.03 |
| xelerance | openswan | 2.6.04 |
| xelerance | openswan | 2.6.05 |
| xelerance | openswan | 2.6.06 |
| xelerance | openswan | 2.6.07 |
| xelerance | openswan | 2.6.08 |
| xelerance | openswan | 2.6.09 |
| xelerance | openswan | 2.6.10 |
| xelerance | openswan | 2.6.11 |
| xelerance | openswan | 2.6.12 |
| xelerance | openswan | 2.6.13 |
| xelerance | openswan | 2.6.14 |
| xelerance | openswan | 2.6.15 |
| xelerance | openswan | 2.6.16 |
| xelerance | openswan | 2.6.17 |
| xelerance | openswan | 2.6.18 |
| xelerance | openswan | 2.6.19 |
| xelerance | openswan | 2.6.20 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openswan |
| ||||||||||||||||||||
| strongswan |
|
Common Weakness Enumeration
References