CVE-2009-1957
Vulnerability from cvelistv5
Published
2009-06-06 18:00
Modified
2024-08-07 05:36
Severity ?
EPSS score ?
Summary
charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers "an incomplete state," followed by a CREATE_CHILD_SA request.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:36:19.193Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "35296",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35296"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch"
},
{
"name": "36922",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36922"
},
{
"name": "[strongSwan] 20090527 [strongSwan] ANNOUNCE: strongSwan 4.3.1 and 4.2.15 released",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"
},
{
"name": "DSA-1899",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2009/dsa-1899"
},
{
"name": "35178",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35178"
},
{
"name": "35685",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35685"
},
{
"name": "SUSE-SR:2009:012",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://download.strongswan.org/CHANGES4.txt"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers \"an incomplete state,\" followed by a CREATE_CHILD_SA request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2009-06-13T09:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "35296",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35296"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch"
},
{
"name": "36922",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36922"
},
{
"name": "[strongSwan] 20090527 [strongSwan] ANNOUNCE: strongSwan 4.3.1 and 4.2.15 released",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"
},
{
"name": "DSA-1899",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2009/dsa-1899"
},
{
"name": "35178",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35178"
},
{
"name": "35685",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35685"
},
{
"name": "SUSE-SR:2009:012",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://download.strongswan.org/CHANGES4.txt"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1957",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers \"an incomplete state,\" followed by a CREATE_CHILD_SA request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "35296",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35296"
},
{
"name": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch",
"refsource": "CONFIRM",
"url": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch"
},
{
"name": "36922",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/36922"
},
{
"name": "[strongSwan] 20090527 [strongSwan] ANNOUNCE: strongSwan 4.3.1 and 4.2.15 released",
"refsource": "MLIST",
"url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"
},
{
"name": "DSA-1899",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2009/dsa-1899"
},
{
"name": "35178",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35178"
},
{
"name": "35685",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35685"
},
{
"name": "SUSE-SR:2009:012",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
},
{
"name": "http://download.strongswan.org/CHANGES4.txt",
"refsource": "CONFIRM",
"url": "http://download.strongswan.org/CHANGES4.txt"
},
{
"name": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme",
"refsource": "CONFIRM",
"url": "http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1957",
"datePublished": "2009-06-06T18:00:00",
"dateReserved": "2009-06-06T00:00:00",
"dateUpdated": "2024-08-07T05:36:19.193Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2009-1957\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2009-06-08T01:00:00.733\",\"lastModified\":\"2009-10-14T05:24:19.377\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers \\\"an incomplete state,\\\" followed by a CREATE_CHILD_SA request.\"},{\"lang\":\"es\",\"value\":\"charon/sa/ike_sa.c del demonio charon de strongSWAN anterior a v4.3.1, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (referenca a puntero nulo y ca\u00edda) a trav\u00e9s de una solicitud IKE_SA_INIT no v\u00e1lida que provoca \\\"un estado incompleto\\\", seguido de una solicitud CREATE_CHILD_SA.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":5.0},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.3.0\",\"matchCriteriaId\":\"A0771FD2-9FB2-4F00-AFB3-B44D124FC5C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A60B8687-A72A-4AF6-BDE9-795A1AC2F98B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD5EA677-BC73-4139-BF09-ADE65C2502A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68B10EB8-0A5B-4C63-9A7D-2F034C286E6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F13A264-EA51-4B92-B102-5316E45DB32F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"406E1E6C-EA61-4FB8-9B0F-CE823046B09E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F31D56AC-D037-42AE-B70F-C7700929DDD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"43A3A15C-122A-4564-A2E3-CB0E7C314797\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6806075C-2433-4CCB-919B-27979C79C8A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3809AE25-E840-4DB3-879E-F678305EC11B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"959DA882-CC63-45F7-BF08-55F38DD8E999\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9313C88D-1C24-4623-87B4-ECA8285E28A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08474171-A617-4163-BEAD-AA14F53A2BFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5516113A-F0F6-478F-95F7-9B4FB2DC68B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D5E9376-3ED9-4A3D-83CE-7E1725F8F366\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59BFC4CB-91E9-4181-A390-F0CE0D12EE2C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"339E325D-B76C-400C-B332-7CA675C4F72B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C78E4DAD-B255-4666-927F-D82AC7396FE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B602806-1420-4640-AD17-A2FEFDA6A967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A203ADA7-54C9-4F37-A254-0A5378BB9B1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E1C417F-C18A-4902-B409-09DD023974B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"235DBD81-E542-4FF7-A620-1872DC81D618\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"489F9DFA-5B24-4206-A306-0BAE849C2D2C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"382D76A4-C2C6-4C1C-A0C0-757C372154DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4BD021C-FDAC-4938-9390-D455577D30B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A977F561-D324-48EA-BAC5-66920F6BD584\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D09EEB6-386C-4A73-BC08-4243BDC49EE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBE3B5F4-063F-4AE9-B589-932751182101\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AFD8D5D-7FB7-4B25-B1F2-7850348A6924\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24F75943-1327-4868-88D5-917D06BCF5E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4BE9083-EF34-4B1A-A139-E779E9704F88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.6.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABC07651-4412-40B7-A6C2-9CBCC010CBE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.6.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC0D725F-4161-45BA-B1CE-99C2A75B7220\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0050370A-4CF0-4772-B287-DD05C5827E92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5518A917-D5D1-4985-BF71-B1A34BD3D5B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"778D7442-F54A-47DF-B87B-3CFA3CF08799\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16984E6E-7CA8-4DC3-B800-FFE007617FE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C85F0BE-7E89-4B79-A036-9238785BE705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DFF4780-2F92-4DF3-878A-C7E2BD57E39C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C794994-9367-4BBB-8940-BBB44B7C1C5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"082272D3-0FE4-4959-978A-FFF795B52CA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DFEF9B3-C7F7-4588-A174-FAFD39C04116\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64C5AB11-3B59-4677-B544-28A22C413C72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E595C454-4456-477A-BE51-75CEAB547E98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A40E983-4721-48FF-9EFB-702BA78DCB3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59E7FA4C-69EE-4225-99FF-0EAB4A6C0049\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DDF25EB-5509-4D79-8D26-A1CA1092089E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A558368F-D9B1-49DF-A64F-95909A4EE7AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"74348E15-FF47-4B4D-B062-2EAE3141C84F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90985506-224F-4AE2-899E-93CA64025396\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC3386A9-3740-4861-84B0-AAAC5C01378E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4E823F7-7162-440E-A113-7B1F437BF508\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D1DEE61-13CB-4810-81B6-2AEBF13619CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6D82E08-D6BF-41E3-9C3D-52552C8753CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF06C431-DE35-4CCD-9DCE-ED9EE6A17464\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C826191-A68F-4E02-945B-73F35AA580F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A316AF53-7E95-4E4F-8E50-22145F144CB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7D3F068-778E-4BB7-AB22-368714BE1BFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96330C24-C1AB-4B00-A3CC-5CCD291E0069\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BEF630C7-2AAB-4106-BAC9-AAE6FF278E15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF58206E-3086-45AC-91B6-032EF55D5552\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D636603-65D5-45DB-AF7F-DD01B3932914\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97027262-849C-4DE9-90C9-0D9FBBC9F96B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8658539D-27D8-47EE-9468-A6B625E6D45F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C41F9E10-000D-4F3B-BEA6-DEE87405B89B\"}]}]}],\"references\":[{\"url\":\"http://download.strongswan.org/CHANGES4.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/35296\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/35685\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/36922\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2009/dsa-1899\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/35178\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.strongswan.org/pipermail/users/2009-May/003457.html\",\"source\":\"cve@mitre.org\"}]}}"
}
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.