Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-2185
HistoryJun 25, 2009 - 2:00 a.m.

CVE-2009-2185

2009-06-2502:00:00
CWE-20
[email protected]
web.nvd.nist.gov
32
cve-2009-2185
asn.1 parser
strongswan
openswan
denial of service
remote attackers
x.509 certificate

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.2%

JSON

The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.

Affected configurations

NVD
Node
strongswanstrongswanMatch2.8.0
OR
strongswanstrongswanMatch2.8.1
OR
strongswanstrongswanMatch2.8.2
OR
strongswanstrongswanMatch2.8.3
OR
strongswanstrongswanMatch2.8.4
OR
strongswanstrongswanMatch2.8.5
OR
strongswanstrongswanMatch2.8.6
OR
strongswanstrongswanMatch2.8.7
OR
strongswanstrongswanMatch2.8.8
OR
strongswanstrongswanMatch2.8.9
OR
strongswanstrongswanMatch2.8.10
OR
strongswanstrongswanMatch4.1
OR
strongswanstrongswanMatch4.2.0
OR
strongswanstrongswanMatch4.2.1
OR
strongswanstrongswanMatch4.2.2
OR
strongswanstrongswanMatch4.2.3
OR
strongswanstrongswanMatch4.2.4
OR
strongswanstrongswanMatch4.2.5
OR
strongswanstrongswanMatch4.2.6
OR
strongswanstrongswanMatch4.2.7
OR
strongswanstrongswanMatch4.2.8
OR
strongswanstrongswanMatch4.2.9
OR
strongswanstrongswanMatch4.2.10
OR
strongswanstrongswanMatch4.2.11
OR
strongswanstrongswanMatch4.2.12
OR
strongswanstrongswanMatch4.2.13
OR
strongswanstrongswanMatch4.2.14
OR
strongswanstrongswanMatch4.2.15
OR
strongswanstrongswanMatch4.3.0
OR
strongswanstrongswanMatch4.3.1
OR
xeleranceopenswanMatch2.4.0
OR
xeleranceopenswanMatch2.4.1
OR
xeleranceopenswanMatch2.4.2
OR
xeleranceopenswanMatch2.4.3
OR
xeleranceopenswanMatch2.4.4
OR
xeleranceopenswanMatch2.4.5
OR
xeleranceopenswanMatch2.4.9
OR
xeleranceopenswanMatch2.4.10
OR
xeleranceopenswanMatch2.6.03
OR
xeleranceopenswanMatch2.6.04
OR
xeleranceopenswanMatch2.6.05
OR
xeleranceopenswanMatch2.6.06
OR
xeleranceopenswanMatch2.6.07
OR
xeleranceopenswanMatch2.6.08
OR
xeleranceopenswanMatch2.6.09
OR
xeleranceopenswanMatch2.6.10
OR
xeleranceopenswanMatch2.6.11
OR
xeleranceopenswanMatch2.6.12
OR
xeleranceopenswanMatch2.6.13
OR
xeleranceopenswanMatch2.6.14
OR
xeleranceopenswanMatch2.6.15
OR
xeleranceopenswanMatch2.6.16
OR
xeleranceopenswanMatch2.6.17
OR
xeleranceopenswanMatch2.6.18
OR
xeleranceopenswanMatch2.6.19
OR
xeleranceopenswanMatch2.6.20

References

Related

nessus 19
openvas 33
veracode 1
nvd 2
debian 2
prion 2
oraclelinux 1
centos 1
fedora 2
cvelist 2
ubuntucve 2
debiancve 2
redhat 1
gentoo 1
cve 1
securityvulns 2
osv 1
nessus
nessus
SuSE 11 Security Update : openswan (SAT Patch Number 1048)
2009-09-24 00:00:00
openSUSE Security Update : openswan (openswan-1052)
2009-07-21 00:00:00
openSUSE 10 Security Update : openswan (openswan-6329)
2009-10-06 00:00:00
openvas
openvas
SLES9: Security update for freeswan
2009-10-10 00:00:00
Fedora Core 11 FEDORA-2009-7478 (openswan)
2009-07-29 00:00:00
Debian Security Advisory DSA 1898-1 (openswan)
2009-10-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:34:41
nvd
nvd
CVE-2009-2185
2009-06-25 02:00:00
CVE-2009-2661
2009-08-04 16:30:00
debian
debian
[SECURITY] [DSA 1898-1] New openswan packages fix denial of service
2009-10-02 18:25:39
[SECURITY] [DSA 1899-1] New strongswan packages fix denial of service
2009-10-02 18:41:34
prion
prion
Code injection
2009-06-25 02:00:00
Design/Logic Flaw
2009-08-04 16:30:00
oraclelinux
oraclelinux
openswan security update
2009-07-02 00:00:00
centos
centos
openswan security update
2009-07-02 23:46:08
fedora
fedora
[SECURITY] Fedora 11 Update: openswan-2.6.21-5.fc11
2009-07-11 17:19:09
[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10
2009-07-11 16:56:13
cvelist
cvelist
CVE-2009-2185
2009-06-24 23:00:00
CVE-2009-2661
2009-08-04 16:13:00
ubuntucve
ubuntucve
CVE-2009-2185
2009-06-25 00:00:00
CVE-2009-2661
2009-08-04 00:00:00
debiancve
debiancve
CVE-2009-2185
2009-06-25 02:00:00
CVE-2009-2661
2009-08-04 16:30:00
redhat
redhat
(RHSA-2009:1138) Important: openswan security update
2009-07-02 00:00:00
gentoo
gentoo
Openswan: Denial of service
2009-09-09 00:00:00
cve
cve
CVE-2009-2661
2009-08-04 16:30:00
securityvulns
securityvulns
[SECURITY] [DSA 1899-1] New strongswan packages fix denial of service
2009-10-03 00:00:00
OpenSwan / StrongSwan multiple security vulnerabilities
2009-10-03 00:00:00
osv
osv
strongswan - denial of service
2009-10-02 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.2%

JSON
Related for CVE-2009-2185
nessus19openvas33veracode1nvd2debian2prion2oraclelinux1centos1fedora2cvelist2ubuntucve2debiancve2redhat1gentoo1cve1securityvulns2osv1