Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-0790
HistoryApr 01, 2009 - 10:30 a.m.

CVE-2009-0790

2009-04-0110:30:00
CWE-20
[email protected]
web.nvd.nist.gov
52
cve-2009-0790
pluto ike daemon
openswan
strongswan ipsec
denial of service
remote attackers
dpd
isakmp
ipsec ike notification
nvd

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.834 High

EPSS

Percentile

98.4%

JSON

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.

Related

nessus 17
altlinux 3
openvas 25
debiancve 1
prion 1
seebug 1
checkpoint_advisories 1
securityvulns 2
debian 2
veracode 1
ubuntucve 1
fedora 1
oraclelinux 1
centos 1
osv 1
redhat 1
gentoo 1
nessus
nessus
openSUSE 10 Security Update : openswan (openswan-6119)
2009-04-08 00:00:00
SuSE 11 Security Update : openswan (SAT Patch Number 678)
2009-09-24 00:00:00
Debian DSA-1759-1 : strongswan - denial of service
2009-03-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package strongswan version 4.2.14-alt1
2009-05-13 00:00:00
Security fix for the ALT Linux 6 package strongswan version 4.2.14-alt1
2009-05-13 00:00:00
Security fix for the ALT Linux 5 package strongswan version 4.2.14-alt1
2009-05-13 00:00:00
openvas
openvas
Debian Security Advisory DSA 1759-1 (strongswan)
2009-04-06 00:00:00
SLES11: Security update for openswan
2009-10-11 00:00:00
SLES10: Security update for strongswan
2009-10-13 00:00:00
debiancve
debiancve
CVE-2009-0790
2009-04-01 10:30:00
prion
prion
Null pointer dereference
2009-04-01 10:30:00
seebug
seebug
Openswanε’ŒstrongSwan DPDζŠ₯ζ–‡θΏœη¨‹ζ‹’η»ζœεŠ‘ζΌζ΄ž
2009-04-01 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSwan and StrongSwan DPD Packet Remote Denial of Service - Ver2 (CVE-2009-0790)
2014-03-31 00:00:00
securityvulns
securityvulns
Openswan / Strongswan DoS
2009-04-01 00:00:00
CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec
2009-04-01 00:00:00
debian
debian
[SECURITY] [DSA 1759-1] New strongswan packages fix denial of service
2009-03-30 23:49:47
[SECURITY] [DSA 1760-1] New openswan packages fix denial of service
2009-03-30 23:50:09
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:31:21
ubuntucve
ubuntucve
CVE-2009-0790
2009-04-01 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10
2009-07-11 16:56:13
oraclelinux
oraclelinux
openswan security update
2009-03-30 00:00:00
centos
centos
openswan security update
2009-04-09 10:33:25
osv
osv
openswan - denial of service
2009-03-30 00:00:00
redhat
redhat
(RHSA-2009:0402) Important: openswan security update
2009-03-30 00:00:00
gentoo
gentoo
Openswan: Denial of service
2009-09-09 00:00:00

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.834 High

EPSS

Percentile

98.4%

JSON
Related for CVE-2009-0790
nessus17altlinux3openvas25debiancve1prion1seebug1checkpoint_advisories1securityvulns2debian2veracode1ubuntucve1fedora1oraclelinux1centos1osv1redhat1gentoo1