CVE-2014-9221

MÉDIO 5.0CVE-2014-9221 · Published 07/01/2015 · updated 17/06/2026

Em resumo

CVE-2014-9221 é uma vulnerabilidade MÉDIO (CVSS 5.0) que afeta strongswan (strongswan).
Chance de exploração nos próximos 30 dias (EPSS): 3.8%, maior que 90.1% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
strongswan strongswan	`= 4.5.0= 4.5.1= 4.5.2= 4.5.3= 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4= 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.1.0= 5.1.1= 5.1.2= 5.1.3= 5.2.0`	No fix yet

Description

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.

References

lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html · Third Party Advisory
lists.opensuse.org/opensuse-updates/2015-01/msg00054.html · Third Party Advisory
secunia.com/advisories/62071 · Permissions Required
secunia.com/advisories/62083
secunia.com/advisories/62095 · Permissions Required
secunia.com/advisories/62663 · Permissions Required
strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html · Vendor Advisory
strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html
debian.org/security/2015/dsa-3118 · Third Party Advisory
securityfocus.com/bid/71894
ubuntu.com/usn/USN-2450-1 · Third Party Advisory

Mais vulnerabilidades de strongswan

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

strongswan

= 4.5.0= 4.5.1= 4.5.2= 4.5.3= 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4= 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.1.0= 5.1.1= 5.1.2= 5.1.3= 5.2.0

No fix yet

Mais vulnerabilidades de strongswan

Ver tudo →