Secunia
Login
|
|
CVE Reference: CVE-2008-4551 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-4551 |
|
|
Description: strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP). |
|
|
CVE Status: Candidate |
|
|
References: ST 1020903 SAID Secunia Advisory: SA31963 MISC http://labs.mudynamics.com/advisories/MU-200809-01.txt CONFIRM http://download.strongswan.org/CHANGES4.txt BID 31291 |
|
| Return to the previous page. |
