Null pointer dereference

2009-04-0110:30:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.907 High

EPSS

Percentile

98.8%

JSON

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.

CPENameOperatorVersion
strongswaneq2.4.3
strongswaneq2.4.2
strongswaneq2.8.0
strongswaneq4.2.6
strongswaneq2.8.1
strongswaneq2.4.4
strongswaneq2.6.0
strongswaneq4.2.12
strongswaneq4.2.10
strongswaneq2.8.8

Name	Operator	Version
strongswan	eq	2.4.3
strongswan	eq	2.4.2
strongswan	eq	2.8.0
strongswan	eq	4.2.6
strongswan	eq	2.8.1
strongswan	eq	2.4.4
strongswan	eq	2.6.0
strongswan	eq	4.2.12
strongswan	eq	4.2.10
strongswan	eq	2.8.8