CVE-2009-2185: Input Validation

Published Jun 24, 2009

Updated

The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.

Affected Software

56 affected components

strongSwan Strongswan=2.8.0

strongSwan Strongswan=4.2.6

strongSwan Strongswan=2.8.1

strongSwan Strongswan=4.2.12

strongSwan Strongswan=4.2.10

strongSwan Strongswan=2.8.9

strongSwan Strongswan=2.8.8

strongSwan Strongswan=2.8.4

strongSwan Strongswan=4.2.9

strongSwan Strongswan=4.2.14

strongSwan Strongswan=2.8.3

strongSwan Strongswan=4.2.3

strongSwan Strongswan=4.2.5

strongSwan Strongswan=4.2.8

strongSwan Strongswan=4.2.0

strongSwan Strongswan=4.2.1

strongSwan Strongswan=2.8.7

strongSwan Strongswan=4.2.13

strongSwan Strongswan=4.3.0

strongSwan Strongswan=2.8.6

strongSwan Strongswan=4.2.11

strongSwan Strongswan=4.2.4

strongSwan Strongswan=2.8.10

strongSwan Strongswan=4.2.7

strongSwan Strongswan=4.2.2

strongSwan Strongswan=4.3.1

strongSwan Strongswan=4.2.15

strongSwan Strongswan=4.1

strongSwan Strongswan=2.8.5

strongSwan Strongswan=2.8.2

Xelerance Openswan=2.4.1

Xelerance Openswan=2.4.2

Xelerance Openswan=2.4.3

Xelerance Openswan=2.4.4

Xelerance Openswan=2.4.5

Xelerance Openswan=2.4.9

Xelerance Openswan=2.4.10

Xelerance Openswan=2.6.03

Xelerance Openswan=2.6.04

Xelerance Openswan=2.6.05

Xelerance Openswan=2.6.06

Xelerance Openswan=2.6.07

Xelerance Openswan=2.6.08

Xelerance Openswan=2.6.09

Xelerance Openswan=2.6.10

Xelerance Openswan=2.6.11

Xelerance Openswan=2.6.12

Xelerance Openswan=2.6.13

Xelerance Openswan=2.6.14

Xelerance Openswan=2.6.15

Xelerance Openswan=2.6.16

Xelerance Openswan=2.6.17

Xelerance Openswan=2.6.18

Xelerance Openswan=2.6.19

Xelerance Openswan=2.6.20

Xelerance Openswan=2.4.0

Remediation

Patch Available

http://www.securityfocus.com/bid/35452

Event History

Jun 24, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2185?

CVE-2009-2185 has a severity rating that indicates it can lead to a denial of service attack.

How do I fix CVE-2009-2185?

To fix CVE-2009-2185, upgrade to strongSwan version 2.8.10 or 4.2.16 and above, or openSwan version 2.6.22 and above.

What software is affected by CVE-2009-2185?

CVE-2009-2185 affects strongSwan versions before 2.8.10, 4.2 before 4.2.16, 4.3 before 4.3.2, and openSwan versions before 2.6.22 and 2.4 before 2.4.15.

What kind of attack can CVE-2009-2185 cause?

CVE-2009-2185 can allow remote attackers to cause a denial of service to the pluto IKE daemon.

When was CVE-2009-2185 disclosed?

CVE-2009-2185 was publicly disclosed in the year 2009.