Home > Vulnerability Database > CVE-2009-0790

Mend.io Vulnerability Database

CVE-2009-0790

Date: April 1, 2009

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.

Severity Score

5.3

Related Resources (21)

Url: http://www.securitytracker.com/id?1021950

Url: http://secunia.com/advisories/34546

Url: http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txt

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-0790

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/49523

Url: http://www.debian.org/security/2009/dsa-1759

Url: http://secunia.com/advisories/34494

Url: http://secunia.com/advisories/34472

Url: http://secunia.com/advisories/34483

Url: http://www.redhat.com/support/errata/RHSA-2009-0402.html

Url: http://download.strongswan.org/CHANGES4.txt

Url: http://www.securityfocus.com/bid/34296

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171

Url: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-0790

Url: https://access.redhat.com/security/cve/CVE-2009-0790

Url: http://www.securityfocus.com/archive/1/502270/100/0/threaded

Url: http://www.securitytracker.com/id?1021949

Url: http://www.vupen.com/english/advisories/2009/0886

Url: http://www.debian.org/security/2009/dsa-1760

Url: https://www.mend.io/vulnerability-database/CVE-2009-0790

Severity Score

5.3

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-0790

Date: April 1, 2009

Severity Score

Related Resources (21)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?