CVEvulnerability
CVE-2009-2661
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-310
Description
The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote attackers to cause a denial of service (pluto IKE daemon crash) via malformed ASN.1 data. NOTE: this is due to an incomplete fix for CVE-2009-2185.
Affected configurations
• strongswan strongswan 2.8.0
• strongswan strongswan 2.8.1
• strongswan strongswan 2.8.2
• strongswan strongswan 2.8.3
• strongswan strongswan 2.8.4
• strongswan strongswan 2.8.5
• strongswan strongswan 2.8.6
• strongswan strongswan 2.8.7
• strongswan strongswan 2.8.8
• strongswan strongswan 2.8.10
• strongswan strongswan 4.2.0
• strongswan strongswan 4.2.1
• strongswan strongswan 4.2.2
• strongswan strongswan 4.2.3
• strongswan strongswan 4.2.10
• strongswan strongswan 4.2.11
• strongswan strongswan 4.2.12
• strongswan strongswan 4.2.13
• strongswan strongswan 4.2.14
• strongswan strongswan 4.2.15
• strongswan strongswan 4.2.16
• strongswan strongswan 4.3.0
• strongswan strongswan 4.3.1
• strongswan strongswan 4.3.2
Related
Weakness · not in database (1)
References
- http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch download.strongswan.org
- http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch Patch
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html lists.opensuse.org
- http://secunia.com/advisories/36922 secunia.com
- http://up2date.astaro.com/2009/08/up2date_7505_released.html up2date.astaro.com
- http://www.debian.org/security/2009/dsa-1899 www.debian.org
- http://www.openwall.com/lists/oss-security/2009/07/27/1 www.openwall.com
- http://www.vupen.com/english/advisories/2009/2247 www.vupen.com
- https://lists.strongswan.org/pipermail/announce/2009-July/000056.html Patch
- http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch download.strongswan.org
- http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch Patch
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html lists.opensuse.org
- http://secunia.com/advisories/36922 secunia.com
- http://up2date.astaro.com/2009/08/up2date_7505_released.html up2date.astaro.com
- http://www.debian.org/security/2009/dsa-1899 www.debian.org
- http://www.openwall.com/lists/oss-security/2009/07/27/1 www.openwall.com
- http://www.vupen.com/english/advisories/2009/2247 www.vupen.com
- https://lists.strongswan.org/pipermail/announce/2009-July/000056.html Patch