CVE-2014-9221
Fixed in a distro release EPSS 4%
strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.
Products: strongswan, opensuse, canonical ubuntu_linux, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | strongswan | 5.2.1-5 |
| Debian 13 | strongswan | 5.2.1-5 |
| Debian 14 | strongswan | 5.2.1-5 |
| Debian 7 | strongswan | 4.5.2-1.5+deb7u6 |
| SUSE Linux Enterprise Desktop 12 | strongswan | 5.1.3-9.1 |
| SUSE Linux Enterprise Server 12 | strongswan | 5.1.3-9.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 | strongswan | 5.1.3-9.2 |
| Ubuntu 14.04 LTS | strongswan | 5.1.2-0ubuntu2.2 |
| openSUSE Tumbleweed | strongswan | 5.3.5-1.1 |