ByteOS Network

NVD Vulnerability Details :

CVE-2014-2891

Deferred

Source-cve@mitre.org

Published At-07 May, 2014 | 10:55

Updated At-12 Apr, 2025 | 10:46

strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

Evaluator Impact

Per: http://www.strongswan.org/blog/2014/05/05/strongswan-denial-of-service-vulnerability-%28cve-2014-2891%29.html "Based on a crash report from one of our users we found that strongSwan versions before 5.1.2 are susceptible to a DoS vulnerability. Affected are strongSwan versions 4.3.3 and newer, up to 5.1.1. The latest release (5.1.3) is not affected."

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-updates/2014-05/msg00064.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html	cve@mitre.org	N/A
http://secunia.com/advisories/59864	cve@mitre.org	N/A
http://www.debian.org/security/2014/dsa-2922	cve@mitre.org	N/A
http://www.securityfocus.com/bid/67212	cve@mitre.org	N/A
http://www.strongswan.org/blog/2014/05/05/strongswan-denial-of-service-vulnerability-%28cve-2014-2891%29.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-updates/2014-05/msg00064.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/59864	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2014/dsa-2922	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/67212	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.strongswan.org/blog/2014/05/05/strongswan-denial-of-service-vulnerability-%28cve-2014-2891%29.html	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History