CVE-2014-2891

Published: May 7, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload.

Affected (8)

Products: Debian: Strongswan · Strongswan: Strongswan

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Debian Strongswan	Up to 5.1.2
Strongswan Strongswan	Up to 5.1.1
Strongswan Strongswan	Version 5.0.0
Strongswan Strongswan	Version 5.0.1
Strongswan Strongswan	Version 5.0.2
Strongswan Strongswan	Version 5.0.3
Strongswan Strongswan	Version 5.0.4
Strongswan Strongswan	Version 5.1.0

References (12)

http://lists.opensuse.org/opensuse-updates/2014-05/msg00064.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html

Source: cve@mitre.org

http://secunia.com/advisories/59864

Source: cve@mitre.org

http://www.debian.org/security/2014/dsa-2922

Source: cve@mitre.org

http://www.securityfocus.com/bid/67212

Source: cve@mitre.org

http://www.strongswan.org/blog/2014/05/05/strongswan-denial-of-service-vulnerability-%28cve-2014-2891%29.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2014-05/msg00064.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59864

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2922

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/67212

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.strongswan.org/blog/2014/05/05/strongswan-denial-of-service-vulnerability-%28cve-2014-2891%29.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.