CVE-2014-9221
07.01.2015, 19:59
strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| strongswan | strongswan | 4.5.0 |
| strongswan | strongswan | 4.5.1 |
| strongswan | strongswan | 4.5.2 |
| strongswan | strongswan | 4.5.3 |
| strongswan | strongswan | 4.6.0 |
| strongswan | strongswan | 4.6.1 |
| strongswan | strongswan | 4.6.2 |
| strongswan | strongswan | 4.6.3 |
| strongswan | strongswan | 4.6.4 |
| strongswan | strongswan | 5.0.0 |
| strongswan | strongswan | 5.0.1 |
| strongswan | strongswan | 5.0.2 |
| strongswan | strongswan | 5.0.3 |
| strongswan | strongswan | 5.0.4 |
| strongswan | strongswan | 5.1.0 |
| strongswan | strongswan | 5.1.1 |
| strongswan | strongswan | 5.1.2 |
| strongswan | strongswan | 5.1.3 |
| strongswan | strongswan | 5.2.0 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 14.10 |
| debian | debian_linux | 7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| strongswan |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-doc |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-hmac |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-ipsec |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| strongswan-libs0 |
|
Common Weakness Enumeration
References