strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.
References
Link | Resource |
---|---|
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html | Third Party Advisory |
http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html | Third Party Advisory |
http://secunia.com/advisories/62071 | Permissions Required Third Party Advisory |
http://secunia.com/advisories/62083 | |
http://secunia.com/advisories/62095 | Permissions Required Third Party Advisory |
http://secunia.com/advisories/62663 | Permissions Required Third Party Advisory |
http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html | Vendor Advisory |
http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html | |
http://www.debian.org/security/2015/dsa-3118 | Third Party Advisory |
http://www.securityfocus.com/bid/71894 | |
http://www.ubuntu.com/usn/USN-2450-1 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2015-01-07T19:00:00
Updated: 2016-12-30T16:57:01
Reserved: 2014-12-02T00:00:00
Link: CVE-2014-9221
JSON object: View
NVD Information
Status : Modified
Published: 2015-01-07T19:59:01.137
Modified: 2023-11-07T02:23:00.090
Link: CVE-2014-9221
JSON object: View
Redhat Information
No data.
CWE