The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.
2009-04-01T10:30:00.267
2025-04-09T00:30:58.490
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | strongswan | strongswan | 2.4.0 | Yes |
| Application | strongswan | strongswan | 2.4.0a | Yes |
| Application | strongswan | strongswan | 2.4.1 | Yes |
| Application | strongswan | strongswan | 2.4.2 | Yes |
| Application | strongswan | strongswan | 2.4.3 | Yes |
| Application | strongswan | strongswan | 2.4.4 | Yes |
| Application | strongswan | strongswan | 2.6.0 | Yes |
| Application | strongswan | strongswan | 2.6.1 | Yes |
| Application | strongswan | strongswan | 2.6.2 | Yes |
| Application | strongswan | strongswan | 2.6.3 | Yes |
| Application | strongswan | strongswan | 2.6.4 | Yes |
| Application | strongswan | strongswan | 2.8.0 | Yes |
| Application | strongswan | strongswan | 2.8.1 | Yes |
| Application | strongswan | strongswan | 2.8.2 | Yes |
| Application | strongswan | strongswan | 2.8.3 | Yes |
| Application | strongswan | strongswan | 2.8.4 | Yes |
| Application | strongswan | strongswan | 2.8.5 | Yes |
| Application | strongswan | strongswan | 2.8.6 | Yes |
| Application | strongswan | strongswan | 2.8.7 | Yes |
| Application | strongswan | strongswan | 2.8.8 | Yes |
| Application | strongswan | strongswan | 4.2.0 | Yes |
| Application | strongswan | strongswan | 4.2.1 | Yes |
| Application | strongswan | strongswan | 4.2.2 | Yes |
| Application | strongswan | strongswan | 4.2.3 | Yes |
| Application | strongswan | strongswan | 4.2.4 | Yes |
| Application | strongswan | strongswan | 4.2.5 | Yes |
| Application | strongswan | strongswan | 4.2.6 | Yes |
| Application | strongswan | strongswan | 4.2.7 | Yes |
| Application | strongswan | strongswan | 4.2.8 | Yes |
| Application | strongswan | strongswan | 4.2.9 | Yes |
| Application | strongswan | strongswan | 4.2.10 | Yes |
| Application | strongswan | strongswan | 4.2.11 | Yes |
| Application | strongswan | strongswan | 4.2.12 | Yes |
| Application | strongswan | strongswan | 4.2.13 | Yes |
| Application | xelerance | openswan | 2.4.0 | Yes |
| Application | xelerance | openswan | 2.4.1 | Yes |
| Application | xelerance | openswan | 2.4.2 | Yes |
| Application | xelerance | openswan | 2.4.3 | Yes |
| Application | xelerance | openswan | 2.4.4 | Yes |
| Application | xelerance | openswan | 2.4.5 | Yes |
| Application | xelerance | openswan | 2.4.9 | Yes |
| Application | xelerance | openswan | 2.4.10 | Yes |
| Application | xelerance | openswan | 2.6.03 | Yes |
| Application | xelerance | openswan | 2.6.04 | Yes |
| Application | xelerance | openswan | 2.6.05 | Yes |
| Application | xelerance | openswan | 2.6.06 | Yes |
| Application | xelerance | openswan | 2.6.07 | Yes |
| Application | xelerance | openswan | 2.6.08 | Yes |
| Application | xelerance | openswan | 2.6.09 | Yes |
| Application | xelerance | openswan | 2.6.10 | Yes |
| Application | xelerance | openswan | 2.6.11 | Yes |
| Application | xelerance | openswan | 2.6.12 | Yes |
| Application | xelerance | openswan | 2.6.13 | Yes |
| Application | xelerance | openswan | 2.6.14 | Yes |
| Application | xelerance | openswan | 2.6.15 | Yes |
| Application | xelerance | openswan | 2.6.16 | Yes |
| Application | xelerance | openswan | 2.6.17 | Yes |
| Application | xelerance | openswan | 2.6.18 | Yes |
| Application | xelerance | openswan | 2.6.19 | Yes |
| Application | xelerance | openswan | 2.6.20 | Yes |