The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.
2009-06-25T02:00:00.297
2025-04-09T00:30:58.490
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | strongswan | strongswan | 2.8.0 | Yes |
| Application | strongswan | strongswan | 2.8.1 | Yes |
| Application | strongswan | strongswan | 2.8.2 | Yes |
| Application | strongswan | strongswan | 2.8.3 | Yes |
| Application | strongswan | strongswan | 2.8.4 | Yes |
| Application | strongswan | strongswan | 2.8.5 | Yes |
| Application | strongswan | strongswan | 2.8.6 | Yes |
| Application | strongswan | strongswan | 2.8.7 | Yes |
| Application | strongswan | strongswan | 2.8.8 | Yes |
| Application | strongswan | strongswan | 2.8.9 | Yes |
| Application | strongswan | strongswan | 2.8.10 | Yes |
| Application | strongswan | strongswan | 4.1 | Yes |
| Application | strongswan | strongswan | 4.2.0 | Yes |
| Application | strongswan | strongswan | 4.2.1 | Yes |
| Application | strongswan | strongswan | 4.2.2 | Yes |
| Application | strongswan | strongswan | 4.2.3 | Yes |
| Application | strongswan | strongswan | 4.2.4 | Yes |
| Application | strongswan | strongswan | 4.2.5 | Yes |
| Application | strongswan | strongswan | 4.2.6 | Yes |
| Application | strongswan | strongswan | 4.2.7 | Yes |
| Application | strongswan | strongswan | 4.2.8 | Yes |
| Application | strongswan | strongswan | 4.2.9 | Yes |
| Application | strongswan | strongswan | 4.2.10 | Yes |
| Application | strongswan | strongswan | 4.2.11 | Yes |
| Application | strongswan | strongswan | 4.2.12 | Yes |
| Application | strongswan | strongswan | 4.2.13 | Yes |
| Application | strongswan | strongswan | 4.2.14 | Yes |
| Application | strongswan | strongswan | 4.2.15 | Yes |
| Application | strongswan | strongswan | 4.3.0 | Yes |
| Application | strongswan | strongswan | 4.3.1 | Yes |
| Application | xelerance | openswan | 2.4.0 | Yes |
| Application | xelerance | openswan | 2.4.1 | Yes |
| Application | xelerance | openswan | 2.4.2 | Yes |
| Application | xelerance | openswan | 2.4.3 | Yes |
| Application | xelerance | openswan | 2.4.4 | Yes |
| Application | xelerance | openswan | 2.4.5 | Yes |
| Application | xelerance | openswan | 2.4.9 | Yes |
| Application | xelerance | openswan | 2.4.10 | Yes |
| Application | xelerance | openswan | 2.6.03 | Yes |
| Application | xelerance | openswan | 2.6.04 | Yes |
| Application | xelerance | openswan | 2.6.05 | Yes |
| Application | xelerance | openswan | 2.6.06 | Yes |
| Application | xelerance | openswan | 2.6.07 | Yes |
| Application | xelerance | openswan | 2.6.08 | Yes |
| Application | xelerance | openswan | 2.6.09 | Yes |
| Application | xelerance | openswan | 2.6.10 | Yes |
| Application | xelerance | openswan | 2.6.11 | Yes |
| Application | xelerance | openswan | 2.6.12 | Yes |
| Application | xelerance | openswan | 2.6.13 | Yes |
| Application | xelerance | openswan | 2.6.14 | Yes |
| Application | xelerance | openswan | 2.6.15 | Yes |
| Application | xelerance | openswan | 2.6.16 | Yes |
| Application | xelerance | openswan | 2.6.17 | Yes |
| Application | xelerance | openswan | 2.6.18 | Yes |
| Application | xelerance | openswan | 2.6.19 | Yes |
| Application | xelerance | openswan | 2.6.20 | Yes |