CVE-2014-2891
Fixed in a distro release EPSS 3%
strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload.
Products: debian strongswan, strongswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | strongswan | 5.1.2-1 |
| Debian 13 | strongswan | 5.1.2-1 |
| Debian 14 | strongswan | 5.1.2-1 |
| Debian 6.0 | strongswan | 4.4.1-5.6 |
| Debian 7 | strongswan | 4.5.2-1.5+deb7u4 |