CVE-2009-0790

概要

参考情報

• download.strongswan.org/CHANGES4.txt · Vendor Advisory
• lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
• secunia.com/advisories/34472 · Vendor Advisory
• secunia.com/advisories/34483 · Vendor Advisory
• secunia.com/advisories/34494 · Vendor Advisory
• secunia.com/advisories/34546 · Vendor Advisory
• debian.org/security/2009/dsa-1759 · Patch
• debian.org/security/2009/dsa-1760 · Patch
• openswan.org/CVE-2009-0790/CVE-2009-0790.txt · Vendor Advisory
• redhat.com/support/errata/RHSA-2009-0402.html
• securityfocus.com/archive/1/502270/100/0/threaded
• securityfocus.com/bid/34296 · Patch
• securitytracker.com/id

strongswan のその他の脆弱性

• CVE-2026-78135高 7.3libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are …
• CVE-2026-78134高 7.1strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche…
• CVE-2026-78133高 7.5libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
• CVE-2026-78132高 7.5strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
• CVE-2026-78131低 3.7strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parse…