Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-0790
HistoryApr 01, 2009 - 10:30 a.m.

CVE-2009-0790

2009-04-0110:30:00
CWE-20
[email protected]
web.nvd.nist.gov
52
cve-2009-0790
pluto ike daemon
openswan
strongswan ipsec
denial of service
remote attackers
dpd
isakmp
ipsec ike notification
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.834 High

EPSS

Percentile

98.5%

JSON

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.

Affected configurations

NVD
Node
strongswanstrongswanMatch2.4.0
OR
strongswanstrongswanMatch2.4.0a
OR
strongswanstrongswanMatch2.4.1
OR
strongswanstrongswanMatch2.4.2
OR
strongswanstrongswanMatch2.4.3
OR
strongswanstrongswanMatch2.4.4
OR
strongswanstrongswanMatch2.6.0
OR
strongswanstrongswanMatch2.6.1
OR
strongswanstrongswanMatch2.6.2
OR
strongswanstrongswanMatch2.6.3
OR
strongswanstrongswanMatch2.6.4
OR
strongswanstrongswanMatch2.8.0
OR
strongswanstrongswanMatch2.8.1
OR
strongswanstrongswanMatch2.8.2
OR
strongswanstrongswanMatch2.8.3
OR
strongswanstrongswanMatch2.8.4
OR
strongswanstrongswanMatch2.8.5
OR
strongswanstrongswanMatch2.8.6
OR
strongswanstrongswanMatch2.8.7
OR
strongswanstrongswanMatch2.8.8
OR
strongswanstrongswanMatch4.2.0
OR
strongswanstrongswanMatch4.2.1
OR
strongswanstrongswanMatch4.2.2
OR
strongswanstrongswanMatch4.2.3
OR
strongswanstrongswanMatch4.2.4
OR
strongswanstrongswanMatch4.2.5
OR
strongswanstrongswanMatch4.2.6
OR
strongswanstrongswanMatch4.2.7
OR
strongswanstrongswanMatch4.2.8
OR
strongswanstrongswanMatch4.2.9
OR
strongswanstrongswanMatch4.2.10
OR
strongswanstrongswanMatch4.2.11
OR
strongswanstrongswanMatch4.2.12
OR
strongswanstrongswanMatch4.2.13
OR
xeleranceopenswanMatch2.4.0
OR
xeleranceopenswanMatch2.4.1
OR
xeleranceopenswanMatch2.4.2
OR
xeleranceopenswanMatch2.4.3
OR
xeleranceopenswanMatch2.4.4
OR
xeleranceopenswanMatch2.4.5
OR
xeleranceopenswanMatch2.4.9
OR
xeleranceopenswanMatch2.4.10
OR
xeleranceopenswanMatch2.6.03
OR
xeleranceopenswanMatch2.6.04
OR
xeleranceopenswanMatch2.6.05
OR
xeleranceopenswanMatch2.6.06
OR
xeleranceopenswanMatch2.6.07
OR
xeleranceopenswanMatch2.6.08
OR
xeleranceopenswanMatch2.6.09
OR
xeleranceopenswanMatch2.6.10
OR
xeleranceopenswanMatch2.6.11
OR
xeleranceopenswanMatch2.6.12
OR
xeleranceopenswanMatch2.6.13
OR
xeleranceopenswanMatch2.6.14
OR
xeleranceopenswanMatch2.6.15
OR
xeleranceopenswanMatch2.6.16
OR
xeleranceopenswanMatch2.6.17
OR
xeleranceopenswanMatch2.6.18
OR
xeleranceopenswanMatch2.6.19
OR
xeleranceopenswanMatch2.6.20

Related

nessus 17
openvas 25
prion 1
seebug 1
checkpoint_advisories 1
securityvulns 2
altlinux 3
cvelist 1
debian 2
ubuntucve 1
veracode 1
nvd 1
debiancve 1
fedora 1
osv 1
oraclelinux 1
centos 1
gentoo 1
redhat 1
nessus
nessus
SuSE 11 Security Update : strongswan (SAT Patch Number 677)
2009-09-24 00:00:00
openSUSE Security Update : openswan (openswan-687)
2009-07-21 00:00:00
SuSE 10 Security Update : strongswan (ZYPP Patch Number 6116)
2009-09-24 00:00:00
openvas
openvas
SLES10: Security update for strongswan
2009-10-13 00:00:00
SLES10: Security update for strongswan
2009-10-13 00:00:00
SLES10: Security update for openswan
2009-10-13 00:00:00
prion
prion
Null pointer dereference
2009-04-01 10:30:00
seebug
seebug
Openswan和strongSwan DPD报文远程拒绝服务漏洞
2009-04-01 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSwan and StrongSwan DPD Packet Remote Denial of Service - Ver2 (CVE-2009-0790)
2014-03-31 00:00:00
securityvulns
securityvulns
Openswan / Strongswan DoS
2009-04-01 00:00:00
CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec
2009-04-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package strongswan version 4.2.14-alt1
2009-05-13 00:00:00
Security fix for the ALT Linux 5 package strongswan version 4.2.14-alt1
2009-05-13 00:00:00
Security fix for the ALT Linux 7 package strongswan version 4.2.14-alt1
2009-05-13 00:00:00
cvelist
cvelist
CVE-2009-0790
2009-04-01 10:00:00
debian
debian
[SECURITY] [DSA 1759-1] New strongswan packages fix denial of service
2009-03-30 23:49:22
[SECURITY] [DSA 1760-1] New openswan packages fix denial of service
2009-03-30 23:49:43
ubuntucve
ubuntucve
CVE-2009-0790
2009-04-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:31:21
nvd
nvd
CVE-2009-0790
2009-04-01 10:30:00
debiancve
debiancve
CVE-2009-0790
2009-04-01 10:30:00
fedora
fedora
[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10
2009-07-11 16:56:13
osv
osv
openswan - denial of service
2009-03-30 00:00:00
oraclelinux
oraclelinux
openswan security update
2009-03-30 00:00:00
centos
centos
openswan security update
2009-04-09 10:33:25
gentoo
gentoo
Openswan: Denial of service
2009-09-09 00:00:00
redhat
redhat
(RHSA-2009:0402) Important: openswan security update
2009-03-30 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.834 High

EPSS

Percentile

98.5%

JSON
Related for CVE-2009-0790
nessus17openvas25prion1seebug1checkpoint_advisories1securityvulns2altlinux3cvelist1debian2ubuntucve1veracode1nvd1debiancve1fedora1osv1oraclelinux1centos1gentoo1redhat1