CVE-2009-2661

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-04 · updated 2026-06-16
Weakness: CWE-310

Description

The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote attackers to cause a denial of service (pluto IKE daemon crash) via malformed ASN.1 data. NOTE: this is due to an incomplete fix for CVE-2009-2185.

Affected products

strongSwan: 2.8.0, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5 (+18)

References

http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch
http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html
http://secunia.com/advisories/36922
http://up2date.astaro.com/2009/08/up2date_7505_released.html
http://www.debian.org/security/2009/dsa-1899
http://www.openwall.com/lists/oss-security/2009/07/27/1
http://www.vupen.com/english/advisories/2009/2247
https://lists.strongswan.org/pipermail/announce/2009-July/000056.html
http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch
http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch

Get alerted when CVE-2009-2661 or the next vulnerability affects your stack