VDB
CVE-2009-0790
CVE-2009-0790
PUBLISHED
Reported by redhat · Published April 1, 2009
The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a |
Timeline
- Apr 1, 2009 CVE Published
- Sep 25, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 2, 2022 CVE Updated
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 9, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
References
- openswan-strongswan-dpd-dos(49523) vdb-entryx_refsource_XF
- 34494 third-party-advisoryx_refsource_SECUNIA
- oval:org.mitre.oval:def:11171 vdb-entrysignaturex_refsource_OVAL
- 34472 third-party-advisoryx_refsource_SECUNIA
- DSA-1759 vendor-advisoryx_refsource_DEBIAN
- ADV-2009-0886 vdb-entryx_refsource_VUPEN
- 1021949 vdb-entryx_refsource_SECTRACK
- 34546 third-party-advisoryx_refsource_SECUNIA
- 20090330 CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec mailing-listx_refsource_BUGTRAQ
- 34483 third-party-advisoryx_refsource_SECUNIA
- x_refsource_CONFIRM
- 1021950 vdb-entryx_refsource_SECTRACK
- x_refsource_CONFIRM
- SUSE-SR:2009:009 vendor-advisoryx_refsource_SUSE
- RHSA-2009:0402 vendor-advisoryx_refsource_REDHAT
- DSA-1760 vendor-advisoryx_refsource_DEBIAN
- 34296 vdb-entryx_refsource_BID