CVE-2009-1958

CVE-2009-1958 affects the strongSwan charon daemon; remote crash when processing crafted IKEv2 packets, leading to denial of service. Debian/OSS advisories note fixes across oldstable through sid: etch: 2.8.0+dfsg-1+etch2, stable (lenny): 4.2.4-5+lenny3, sid: 4.3.2-1.1. OpenVAS entries similarly ...

CVE-2009-1958

charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...

CVE-2009-1958

charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...

CVE-2009-1957

charon/sa/ikesa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an invalid IKESAINIT request that triggers "an incomplete state," followed by a CREATECHILDSA request...