Description
charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers "an incomplete state," followed by a CREATE_CHILD_SA request.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1899-1 | New strongswan packages fix denial of service |
EUVD |
EUVD-2009-1952 | charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers "an incomplete state," followed by a CREATE_CHILD_SA request. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T05:36:19.193Z
Reserved: 2009-06-06T00:00:00.000Z
Link: CVE-2009-1957
No data.
Status : Modified
Published: 2009-06-08T01:00:00.733
Modified: 2026-04-23T00:35:47.467
Link: CVE-2009-1957
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD