CVEvulnerability

CVE-2009-2185

5.0 MEDIUM Published 2009-06-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-06-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.

Affected configurations

• strongswan strongswan 2.8.0 • strongswan strongswan 2.8.1 • strongswan strongswan 2.8.2 • strongswan strongswan 2.8.3 • strongswan strongswan 2.8.4 • strongswan strongswan 2.8.5 • strongswan strongswan 2.8.6 • strongswan strongswan 2.8.7 • strongswan strongswan 2.8.8 • strongswan strongswan 2.8.9 • strongswan strongswan 2.8.10 • strongswan strongswan 4.1 • strongswan strongswan 4.2.0 • strongswan strongswan 4.2.1 • strongswan strongswan 4.2.2 • strongswan strongswan 4.2.3 • strongswan strongswan 4.2.4 • strongswan strongswan 4.2.5 • strongswan strongswan 4.2.6 • strongswan strongswan 4.2.7 • strongswan strongswan 4.2.8 • strongswan strongswan 4.2.9 • strongswan strongswan 4.2.10 • strongswan strongswan 4.2.11 • strongswan strongswan 4.2.12 • strongswan strongswan 4.2.13 • strongswan strongswan 4.2.14 • strongswan strongswan 4.2.15 • strongswan strongswan 4.3.0 • strongswan strongswan 4.3.1 • xelerance openswan 2.4.0 • xelerance openswan 2.4.1 • xelerance openswan 2.4.2 • xelerance openswan 2.4.3 • xelerance openswan 2.4.4 • xelerance openswan 2.4.5 • xelerance openswan 2.4.9 • xelerance openswan 2.4.10 • xelerance openswan 2.6.03 • xelerance openswan 2.6.04 • xelerance openswan 2.6.05 • xelerance openswan 2.6.06 • xelerance openswan 2.6.07 • xelerance openswan 2.6.08 • xelerance openswan 2.6.09 • xelerance openswan 2.6.10 • xelerance openswan 2.6.11 • xelerance openswan 2.6.12 • xelerance openswan 2.6.13 • xelerance openswan 2.6.14 • xelerance openswan 2.6.15 • xelerance openswan 2.6.16 • xelerance openswan 2.6.17 • xelerance openswan 2.6.18 • xelerance openswan 2.6.19 • xelerance openswan 2.6.20

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References