{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-05-27T00:00:00", "descriptions": [{"lang": "en", "value": "charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2009-06-13T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme"}, {"name": "35296", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35296"}, {"name": "36922", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/36922"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch"}, {"name": "[strongSwan] 20090527 [strongSwan] ANNOUNCE: strongSwan 4.3.1 and 4.2.15 released", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"}, {"name": "DSA-1899", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2009/dsa-1899"}, {"name": "35178", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/35178"}, {"name": "35685", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35685"}, {"name": "SUSE-SR:2009:012", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://download.strongswan.org/CHANGES4.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2009-1958", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme", "refsource": "CONFIRM", "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme"}, {"name": "35296", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/35296"}, {"name": "36922", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/36922"}, {"name": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch", "refsource": "CONFIRM", "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch"}, {"name": "[strongSwan] 20090527 [strongSwan] ANNOUNCE: strongSwan 4.3.1 and 4.2.15 released", "refsource": "MLIST", "url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"}, {"name": "DSA-1899", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2009/dsa-1899"}, {"name": "35178", "refsource": "BID", "url": "http://www.securityfocus.com/bid/35178"}, {"name": "35685", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/35685"}, {"name": "SUSE-SR:2009:012", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"name": "http://download.strongswan.org/CHANGES4.txt", "refsource": "CONFIRM", "url": "http://download.strongswan.org/CHANGES4.txt"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T05:36:19.542Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme"}, {"name": "35296", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/35296"}, {"name": "36922", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/36922"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch"}, {"name": "[strongSwan] 20090527 [strongSwan] ANNOUNCE: strongSwan 4.3.1 and 4.2.15 released", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"}, {"name": "DSA-1899", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2009/dsa-1899"}, {"name": "35178", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/35178"}, {"name": "35685", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/35685"}, {"name": "SUSE-SR:2009:012", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://download.strongswan.org/CHANGES4.txt"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-1958", "datePublished": "2009-06-06T18:00:00", "dateReserved": "2009-06-06T00:00:00", "dateUpdated": "2024-08-07T05:36:19.542Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6739FBA-95D4-4C8F-B320-F27856A4D832", "versionEndIncluding": "4.2.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A60B8687-A72A-4AF6-BDE9-795A1AC2F98B", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "FD5EA677-BC73-4139-BF09-ADE65C2502A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "68B10EB8-0A5B-4C63-9A7D-2F034C286E6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "3F13A264-EA51-4B92-B102-5316E45DB32F", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "406E1E6C-EA61-4FB8-9B0F-CE823046B09E", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "F31D56AC-D037-42AE-B70F-C7700929DDD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "43A3A15C-122A-4564-A2E3-CB0E7C314797", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "6806075C-2433-4CCB-919B-27979C79C8A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "3809AE25-E840-4DB3-879E-F678305EC11B", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "959DA882-CC63-45F7-BF08-55F38DD8E999", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "9313C88D-1C24-4623-87B4-ECA8285E28A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "08474171-A617-4163-BEAD-AA14F53A2BFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "5516113A-F0F6-478F-95F7-9B4FB2DC68B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "7D5E9376-3ED9-4A3D-83CE-7E1725F8F366", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "59BFC4CB-91E9-4181-A390-F0CE0D12EE2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "339E325D-B76C-400C-B332-7CA675C4F72B", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*", "matchCriteriaId": "F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "C78E4DAD-B255-4666-927F-D82AC7396FE8", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "9B602806-1420-4640-AD17-A2FEFDA6A967", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "A203ADA7-54C9-4F37-A254-0A5378BB9B1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "0E1C417F-C18A-4902-B409-09DD023974B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "235DBD81-E542-4FF7-A620-1872DC81D618", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "489F9DFA-5B24-4206-A306-0BAE849C2D2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "382D76A4-C2C6-4C1C-A0C0-757C372154DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "E4BD021C-FDAC-4938-9390-D455577D30B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "A977F561-D324-48EA-BAC5-66920F6BD584", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "3D09EEB6-386C-4A73-BC08-4243BDC49EE9", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "DBE3B5F4-063F-4AE9-B589-932751182101", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "6AFD8D5D-7FB7-4B25-B1F2-7850348A6924", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "24F75943-1327-4868-88D5-917D06BCF5E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "A4BE9083-EF34-4B1A-A139-E779E9704F88", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.6.16:*:*:*:*:*:*:*", "matchCriteriaId": "ABC07651-4412-40B7-A6C2-9CBCC010CBE9", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.6.20:*:*:*:*:*:*:*", "matchCriteriaId": "EC0D725F-4161-45BA-B1CE-99C2A75B7220", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "0050370A-4CF0-4772-B287-DD05C5827E92", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "5518A917-D5D1-4985-BF71-B1A34BD3D5B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "778D7442-F54A-47DF-B87B-3CFA3CF08799", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "16984E6E-7CA8-4DC3-B800-FFE007617FE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "4C85F0BE-7E89-4B79-A036-9238785BE705", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "8DFF4780-2F92-4DF3-878A-C7E2BD57E39C", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "6C794994-9367-4BBB-8940-BBB44B7C1C5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "082272D3-0FE4-4959-978A-FFF795B52CA3", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "8DFEF9B3-C7F7-4588-A174-FAFD39C04116", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "64C5AB11-3B59-4677-B544-28A22C413C72", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E595C454-4456-477A-BE51-75CEAB547E98", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "6A40E983-4721-48FF-9EFB-702BA78DCB3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "59E7FA4C-69EE-4225-99FF-0EAB4A6C0049", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "1DDF25EB-5509-4D79-8D26-A1CA1092089E", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "A558368F-D9B1-49DF-A64F-95909A4EE7AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "74348E15-FF47-4B4D-B062-2EAE3141C84F", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "90985506-224F-4AE2-899E-93CA64025396", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "BC3386A9-3740-4861-84B0-AAAC5C01378E", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "F4E823F7-7162-440E-A113-7B1F437BF508", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "1D1DEE61-13CB-4810-81B6-2AEBF13619CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "D6D82E08-D6BF-41E3-9C3D-52552C8753CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "CF06C431-DE35-4CCD-9DCE-ED9EE6A17464", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "6C826191-A68F-4E02-945B-73F35AA580F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "A316AF53-7E95-4E4F-8E50-22145F144CB4", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "C7D3F068-778E-4BB7-AB22-368714BE1BFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "96330C24-C1AB-4B00-A3CC-5CCD291E0069", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "BEF630C7-2AAB-4106-BAC9-AAE6FF278E15", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*", "matchCriteriaId": "BF58206E-3086-45AC-91B6-032EF55D5552", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*", "matchCriteriaId": "7D636603-65D5-45DB-AF7F-DD01B3932914", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "97027262-849C-4DE9-90C9-0D9FBBC9F96B", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "8658539D-27D8-47EE-9468-A6B625E6D45F", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "89ACA351-D10F-4D1A-95B0-4B2E329F1E1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "7A4D6E89-5313-4016-8A7E-036579330DB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "95A8E226-FCEC-4545-A628-24F5A8103BCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "1B944D80-A8B9-4034-A95B-BA92ADC8D4E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "F5267BCC-A51C-4F3B-840C-49EF9C2A15F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "8CDCDB4B-2DF5-4394-B33A-08A4B6604D92", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "66206A52-373C-4DBB-A3D7-2A7569C0181E", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*", "matchCriteriaId": "C41F9E10-000D-4F3B-BEA6-DEE87405B89B", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*", "matchCriteriaId": "4F37DFE8-2996-4904-B733-7BAECA95CB48", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*", "matchCriteriaId": "38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*", "matchCriteriaId": "155EB8F5-7C3C-4293-91EE-62DA561DA54A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector."}, {"lang": "es", "value": "charon/sa/tasks/child_create.c en el demonio charon en strongSWAN anteriores a v4.3.1 conmuta el test NULL por cargas destructivas TSi y TSr, lo que permite a los atacantes remotos causar una denegaci\u00f3n de servicio a trav\u00e9s de una petici\u00f3n IKE__AUTH sin un (1) TSi o (2) un selector de tr\u00e1fico TSr."}], "id": "CVE-2009-1958", "lastModified": "2024-11-21T01:03:47.580", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-06-08T01:00:00.750", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://download.strongswan.org/CHANGES4.txt"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme"}, {"source": "[email protected]", "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/35296"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/35685"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/36922"}, {"source": "[email protected]", "url": "http://www.debian.org/security/2009/dsa-1899"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/35178"}, {"source": "[email protected]", "url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://download.strongswan.org/CHANGES4.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/35296"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/35685"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/36922"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2009/dsa-1899"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/35178"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.strongswan.org/pipermail/users/2009-May/003457.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "[email protected]", "type": "Primary"}]}

{}