National Cyber Awareness System

Vulnerability Summary for CVE-2009-2185

Overview

The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 35452

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/35452

External Source: FEDORA

Name: FEDORA-2009-7478

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00337.html

External Source: FEDORA

Name: FEDORA-2009-7423

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00264.html

External Source: VUPEN

Name: ADV-2009-3354

Hyperlink:http://www.vupen.com/english/advisories/2009/3354

External Source: VUPEN

Name: ADV-2009-1829

Hyperlink:http://www.vupen.com/english/advisories/2009/1829

External Source: VUPEN

Name: ADV-2009-1706

Hyperlink:http://www.vupen.com/english/advisories/2009/1706

External Source: VUPEN

Name: ADV-2009-1639

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2009/1639

External Source: SECTRACK

Name: 1022428

Hyperlink:http://www.securitytracker.com/id?1022428

External Source: REDHAT

Name: RHSA-2009:1138

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-1138.html

External Source: CONFIRM

Name: http://www.ingate.com/Relnote.php?ver=481

Hyperlink:http://www.ingate.com/Relnote.php?ver=481

External Source: DEBIAN

Name: DSA-1899

Hyperlink:http://www.debian.org/security/2009/dsa-1899

External Source: DEBIAN

Name: DSA-1898

Hyperlink:http://www.debian.org/security/2009/dsa-1898

External Source: CONFIRM

Name: http://up2date.astaro.com/2009/07/up2date_7404_released.html

Hyperlink:http://up2date.astaro.com/2009/07/up2date_7404_released.html

External Source: SECUNIA

Name: 37504

Hyperlink:http://secunia.com/advisories/37504

External Source: SECUNIA

Name: 36950

Hyperlink:http://secunia.com/advisories/36950

External Source: SECUNIA

Name: 36922

Hyperlink:http://secunia.com/advisories/36922

External Source: SECUNIA

Name: 35804

Hyperlink:http://secunia.com/advisories/35804

External Source: SECUNIA

Name: 35740

Hyperlink:http://secunia.com/advisories/35740

External Source: SECUNIA

Name: 35698

Hyperlink:http://secunia.com/advisories/35698

External Source: SECUNIA

Name: 35522

Type: Advisory

Hyperlink:http://secunia.com/advisories/35522

External Source: OVAL

Name: oval:org.mitre.oval:def:11079

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11079

External Source: CONFIRM

Name: http://download.strongswan.org/CHANGES42.txt

Type: Advisory

Hyperlink:http://download.strongswan.org/CHANGES42.txt

External Source: CONFIRM

Name: http://download.strongswan.org/CHANGES4.txt

Type: Advisory

Hyperlink:http://download.strongswan.org/CHANGES4.txt

External Source: CONFIRM

Name: http://download.strongswan.org/CHANGES2.txt

Type: Advisory

Hyperlink:http://download.strongswan.org/CHANGES2.txt

References to Check Content

Identifier:oval:org.mitre.oval:def:11079

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11079