CVE-2009-2661

Mô tả

Tham khảo

• download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch
• download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch · Patch
• lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
• lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html
• secunia.com/advisories/36922
• up2date.astaro.com/2009/08/up2date_7505_released.html
• debian.org/security/2009/dsa-1899
• openwall.com/lists/oss-security/2009/07/27/1
• vupen.com/english/advisories/2009/2247
• lists.strongswan.org/pipermail/announce/2009-July/000056.html · Patch

Lỗ hổng khác của strongswan

• CVE-2026-78135CAO 7.3libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are …
• CVE-2026-78134CAO 7.1strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche…
• CVE-2026-78133CAO 7.5libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
• CVE-2026-78132CAO 7.5strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
• CVE-2026-78131THẤP 3.7strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parse…