PT-2009-1086 · Openswan+2 · Openswan+2

Gerd V. Egidy · Published 2009-03-30 · Updated 2024-06-15 · CVE-2009-0790

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Openswan versions 2.4 through 2.4.14 Openswan versions 2.6 through 2.6.20 Strongswan versions 2.4 through 2.4.14 Strongswan versions 2.6 through 2.6.20 Strongswan versions 2.8 through 2.8.8 Strongswan versions 4.2 through 4.2.13

Description The issue allows remote attackers to cause a denial of service via crafted Dead Peer Detection IPsec IKE Notification messages, specifically R U THERE or R U THERE ACK, which can trigger a NULL pointer dereference due to inconsistent ISAKMP state and the lack of a phase2 state association in DPD. This can lead to a daemon crash and restart. Multiple vulnerabilities in the openswan package can be exploited remotely, potentially disrupting the availability of protected information.

Recommendations For Openswan versions 2.4 through 2.4.14, update to version 2.4.15 or later. For Openswan versions 2.6 through 2.6.20, update to version 2.6.21 or later. For Strongswan versions 2.4 through 2.4.14, update to version 2.4.15 or later. For Strongswan versions 2.6 through 2.6.20, update to version 2.6.21 or later. For Strongswan versions 2.8 through 2.8.8, update to version 2.8.9 or later. For Strongswan versions 4.2 through 4.2.13, update to version 4.2.14 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-09387

CVE-2009-0790

DSA-1759-1

DSA-1760-1

OPENSUSE-SU-2024:10579-1

RHSA-2009:0402

RHSA-2009_0402

Affected Products

Openswan

Red Hat

Strongswan

References · 40

• https://osv.dev/vulnerability/openSUSE-SU-2024:10579-1 · Vendor Advisory
• http://secunia.com/advisories/34494 · Vendor Advisory
• http://secunia.com/advisories/34546 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0402.html · Vendor Advisory
• http://download.strongswan.org/CHANGES4.txt · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09387 · Security Note
• http://secunia.com/advisories/34483 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0790 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0790 · Security Note
• http://securityfocus.com/bid/34296 · Patch
• http://secunia.com/advisories/34472 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-0790 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0790 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09357 · Security Note