CVE-2009-2661

Published: Aug 4, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote attackers to cause a denial of service (pluto IKE daemon crash) via malformed ASN.1 data. NOTE: this is due to an incomplete fix for CVE-2009-2185.

Affected (24)

Products: Strongswan: Strongswan

1 product

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Strongswan Strongswan	Version 2.8.0
Strongswan Strongswan	Version 2.8.10
Strongswan Strongswan	Version 2.8.1
Strongswan Strongswan	Version 2.8.2
Strongswan Strongswan	Version 2.8.3
Strongswan Strongswan	Version 2.8.4
Strongswan Strongswan	Version 2.8.5
Strongswan Strongswan	Version 2.8.6
Strongswan Strongswan	Version 2.8.7
Strongswan Strongswan	Version 2.8.8
Strongswan Strongswan	Version 4.2.0
Strongswan Strongswan	Version 4.2.10
Strongswan Strongswan	Version 4.2.11
Strongswan Strongswan	Version 4.2.12
Strongswan Strongswan	Version 4.2.13
Strongswan Strongswan	Version 4.2.14
Strongswan Strongswan	Version 4.2.15
Strongswan Strongswan	Version 4.2.16
Strongswan Strongswan	Version 4.2.1
Strongswan Strongswan	Version 4.2.2
Strongswan Strongswan	Version 4.2.3
Strongswan Strongswan	Version 4.3.0
Strongswan Strongswan	Version 4.3.1
Strongswan Strongswan	Version 4.3.2

Related CWEs

References (20)

http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch

Source: cve@mitre.org

http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch

Source: cve@mitre.org

Patch

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/36922

Source: cve@mitre.org

http://up2date.astaro.com/2009/08/up2date_7505_released.html

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1899

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/07/27/1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/2247

Source: cve@mitre.org

https://lists.strongswan.org/pipermail/announce/2009-July/000056.html

Source: cve@mitre.org

Patch

http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch

Source: af854a3a-2127-422b-91ae-364da2661108

http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36922

Source: af854a3a-2127-422b-91ae-364da2661108

http://up2date.astaro.com/2009/08/up2date_7505_released.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1899

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/07/27/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/2247

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.strongswan.org/pipermail/announce/2009-July/000056.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.