Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

strongswan strongswan 2.4.0a vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-2054
Buffer overflow in the atodn function in strongSwan 2.0.0 up to and including 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote malicious users to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via ...
Strongswan Strongswan 2.4.3Strongswan Strongswan 2.5.7Strongswan Strongswan 2.4.2Strongswan Strongswan 4.1.8Strongswan Strongswan 4.1.11Strongswan Strongswan 2.6.16Strongswan Strongswan 2.5.3Strongswan Strongswan 2.8.0Strongswan Strongswan 4.2.6Strongswan Strongswan 2.8.1Strongswan Strongswan 2.4.4Strongswan Strongswan 2.6.0Strongswan Strongswan 2.3.0Strongswan Strongswan 4.2.12Strongswan Strongswan 4.1.1Strongswan Strongswan 2.7.2Strongswan Strongswan 4.2.10Strongswan Strongswan 2.1.0Strongswan Strongswan 2.1.5Strongswan Strongswan 2.0.2Strongswan Strongswan 2.8.9Strongswan Strongswan 2.8.8
NA
CVE-2009-1957
charon/sa/ike_sa.c in the charon daemon in strongSWAN prior to 4.3.1 allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers "an incomplete state," followed by a CREATE_CHILD_SA req...
Strongswan Strongswan 2.1.3Strongswan Strongswan 2.1.4Strongswan Strongswan 2.4.0Strongswan Strongswan 2.4.0aStrongswan Strongswan 2.5.2Strongswan Strongswan 2.5.3Strongswan Strongswan 2.6.16Strongswan Strongswan 2.6.2Strongswan Strongswan 2.8.3Strongswan Strongswan 2.8.4Strongswan Strongswan 4.0.2Strongswan Strongswan 4.0.3Strongswan Strongswan 4.1.10Strongswan Strongswan 4.1.11Strongswan Strongswan 4.1.2Strongswan Strongswan 4.1.9Strongswan Strongswan 4.2.0Strongswan Strongswan 2.0.0Strongswan Strongswan 2.0.1Strongswan Strongswan 2.1.5Strongswan Strongswan 2.2.0Strongswan Strongswan 2.4.1
NA
CVE-2009-1958
charon/sa/tasks/child_create.c in the charon daemon in strongSWAN prior to 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote malicious users to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector.
Strongswan Strongswan 4.0.3Strongswan Strongswan 4.1.10Strongswan Strongswan 4.1.6Strongswan Strongswan 4.1.7Strongswan Strongswan 4.2.4Strongswan Strongswan 4.2.5Strongswan StrongswanStrongswan Strongswan 2.4.0aStrongswan Strongswan 2.1.4Strongswan Strongswan 2.1.3Strongswan Strongswan 2.3.1Strongswan Strongswan 2.4.2Strongswan Strongswan 2.4.3Strongswan Strongswan 2.5.2Strongswan Strongswan 4.1.0Strongswan Strongswan 4.1.2Strongswan Strongswan 4.1.5Strongswan Strongswan 4.1.4Strongswan Strongswan 4.2.10Strongswan Strongswan 4.2.2Strongswan Strongswan 4.2.3Strongswan Strongswan 4.2.12
NA
CVE-2009-0790
The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 prior to 2.6.21 and 2.4 prior to 2.4.14, and Strongswan 4.2 prior to 4.2.14 and 2.8 prior to 2.8.9, allows remote malicious users to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R...
Strongswan Strongswan 4.2.0Strongswan Strongswan 4.2.1Strongswan Strongswan 4.2.12Strongswan Strongswan 4.2.11Strongswan Strongswan 2.8.2Strongswan Strongswan 2.8.3Strongswan Strongswan 2.4.1Strongswan Strongswan 2.4.0aXelerance Openswan 2.6.07Xelerance Openswan 2.6.08Xelerance Openswan 2.6.16Xelerance Openswan 2.4.0Xelerance Openswan 2.4.3Xelerance Openswan 2.4.5Strongswan Strongswan 2.6.1Strongswan Strongswan 2.6.2Strongswan Strongswan 4.2.4Strongswan Strongswan 4.2.5Strongswan Strongswan 4.2.7Strongswan Strongswan 2.8.8Strongswan Strongswan 2.8.6Strongswan Strongswan 2.8.7
NA
CVE-2008-4551
strongSwan 4.2.6 and previous versions allows remote malicious users to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_expo...
Strongswan Strongswan 4.2.0Strongswan Strongswan 4.1.11Strongswan Strongswan 4.1.4Strongswan Strongswan 4.1.3Strongswan Strongswan 4.0.4Strongswan Strongswan 4.0.3Strongswan Strongswan 4.0.2Strongswan Strongswan 2.6.1Strongswan Strongswan 2.6.0Strongswan Strongswan 2.5.1Strongswan Strongswan 2.5.0Strongswan Strongswan 2.3.1Strongswan Strongswan 2.2.2Strongswan Strongswan 2.1.1Strongswan Strongswan 2.1.0Strongswan Strongswan 4.2.4Strongswan Strongswan 4.2.3Strongswan Strongswan 4.1.8Strongswan Strongswan 4.1.7Strongswan Strongswan 4.1.0Strongswan Strongswan 4.0.7Strongswan Strongswan 2.7.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook