10 matches found
SUSE CVE-2014-2891
strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...
SuSE 11.3 Security Update : strongswan (SAT Patch Number 9251)
This update fixes a NULL ptr dereference DoS via IDDERASN1DN ID payloads. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...
DEBIAN-CVE-2014-2891
strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...
Null pointer dereference
strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...
CVE-2014-2891
strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...
CVE-2014-2891
CVE-2014-2891 affects the strongSwan IPsec daemon and is a NULL pointer dereference vulnerability triggered by processing a crafted ID_DER_ASN1_DN payload, causing the IKE daemon to crash and enabling a denial-of-service. The issue is documented across multiple feeds (SUSE advisories, Gentoo GLSA...
CVE-2014-2891
strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...
CVE-2014-2891
strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...
CVE-2013-6075
The comparedn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows 1 remote attackers to cause a denial of service out-of-bounds read, NULL pointer dereference, and daemon crash or 2 remote authenticated users to impersonate arbitrary users and bypass access restrictions vi...
strongswan -- multiple DoS vulnerabilities
strongSwan Project reports: A DoS vulnerability triggered by crafted IKEv1 fragmentation payloads was discovered in strongSwan's IKE daemon charon. All versions since 5.0.2 are affected. A DoS vulnerability and potential authorization bypass triggered by a crafted IDDERASN1DN ID payload was...