{"api_version":"1","generated_at":"2026-07-23T10:23:34+00:00","cve":"CVE-2008-4551","urls":{"html":"https://cve.report/CVE-2008-4551","api":"https://cve.report/api/cve/CVE-2008-4551.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-4551","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-4551"},"summary":{"title":"CVE-2008-4551","description":"strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP).","state":"PUBLISHED","assigner":"mitre","published_at":"2008-10-14 20:00:01","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://labs.mudynamics.com/advisories/MU-200809-01.txt","name":"http://labs.mudynamics.com/advisories/MU-200809-01.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2660","name":"http://www.vupen.com/english/advisories/2008/2660","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://download.strongswan.org/CHANGES4.txt","name":"http://download.strongswan.org/CHANGES4.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/31963","name":"http://secunia.com/advisories/31963","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"strongSwan IKEv2 Daemon Denial of Service Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1020903","name":"http://www.securitytracker.com/id?1020903","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"strongSwan IKE_SA_INIT Null Pointer Dereference Lets Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31291","name":"http://www.securityfocus.com/bid/31291","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"strongSwan 'mpz_export()' Remote Denial Of Service Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4551","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4551","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.4.0a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"2.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"4.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4551","vulnerable":"1","versionEndIncluding":"4.2.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"strongswan","cpe5":"strongswan","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T10:17:09.920Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2008-2660","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2660"},{"name":"1020903","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1020903"},{"name":"31291","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31291"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://labs.mudynamics.com/advisories/MU-200809-01.txt"},{"name":"31963","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31963"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://download.strongswan.org/CHANGES4.txt"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-09-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-02-26T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ADV-2008-2660","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2660"},{"name":"1020903","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1020903"},{"name":"31291","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31291"},{"tags":["x_refsource_MISC"],"url":"http://labs.mudynamics.com/advisories/MU-200809-01.txt"},{"name":"31963","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31963"},{"tags":["x_refsource_CONFIRM"],"url":"http://download.strongswan.org/CHANGES4.txt"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-4551","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2008-2660","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2660"},{"name":"1020903","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1020903"},{"name":"31291","refsource":"BID","url":"http://www.securityfocus.com/bid/31291"},{"name":"http://labs.mudynamics.com/advisories/MU-200809-01.txt","refsource":"MISC","url":"http://labs.mudynamics.com/advisories/MU-200809-01.txt"},{"name":"31963","refsource":"SECUNIA","url":"http://secunia.com/advisories/31963"},{"name":"http://download.strongswan.org/CHANGES4.txt","refsource":"CONFIRM","url":"http://download.strongswan.org/CHANGES4.txt"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-4551","datePublished":"2008-10-14T19:00:00.000Z","dateReserved":"2008-10-14T00:00:00.000Z","dateUpdated":"2024-08-07T10:17:09.920Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-10-14 20:00:01","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.6","matchCriteriaId":"B3DF2081-25C3-4838-BDF6-07BC6583761E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A60B8687-A72A-4AF6-BDE9-795A1AC2F98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FD5EA677-BC73-4139-BF09-ADE65C2502A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68B10EB8-0A5B-4C63-9A7D-2F034C286E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3F13A264-EA51-4B92-B102-5316E45DB32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"406E1E6C-EA61-4FB8-9B0F-CE823046B09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F31D56AC-D037-42AE-B70F-C7700929DDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"43A3A15C-122A-4564-A2E3-CB0E7C314797"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6806075C-2433-4CCB-919B-27979C79C8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3809AE25-E840-4DB3-879E-F678305EC11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"959DA882-CC63-45F7-BF08-55F38DD8E999"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9313C88D-1C24-4623-87B4-ECA8285E28A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"08474171-A617-4163-BEAD-AA14F53A2BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5516113A-F0F6-478F-95F7-9B4FB2DC68B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7D5E9376-3ED9-4A3D-83CE-7E1725F8F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59BFC4CB-91E9-4181-A390-F0CE0D12EE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"339E325D-B76C-400C-B332-7CA675C4F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*","matchCriteriaId":"F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C78E4DAD-B255-4666-927F-D82AC7396FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9B602806-1420-4640-AD17-A2FEFDA6A967"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E1C417F-C18A-4902-B409-09DD023974B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"235DBD81-E542-4FF7-A620-1872DC81D618"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"489F9DFA-5B24-4206-A306-0BAE849C2D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"382D76A4-C2C6-4C1C-A0C0-757C372154DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E4BD021C-FDAC-4938-9390-D455577D30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"A977F561-D324-48EA-BAC5-66920F6BD584"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3D09EEB6-386C-4A73-BC08-4243BDC49EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBE3B5F4-063F-4AE9-B589-932751182101"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"24F75943-1327-4868-88D5-917D06BCF5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4BE9083-EF34-4B1A-A139-E779E9704F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0050370A-4CF0-4772-B287-DD05C5827E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"64C5AB11-3B59-4677-B544-28A22C413C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E595C454-4456-477A-BE51-75CEAB547E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6A40E983-4721-48FF-9EFB-702BA78DCB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"59E7FA4C-69EE-4225-99FF-0EAB4A6C0049"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1DDF25EB-5509-4D79-8D26-A1CA1092089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A558368F-D9B1-49DF-A64F-95909A4EE7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"74348E15-FF47-4B4D-B062-2EAE3141C84F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"90985506-224F-4AE2-899E-93CA64025396"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3386A9-3740-4861-84B0-AAAC5C01378E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4E823F7-7162-440E-A113-7B1F437BF508"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1D1DEE61-13CB-4810-81B6-2AEBF13619CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D6D82E08-D6BF-41E3-9C3D-52552C8753CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF06C431-DE35-4CCD-9DCE-ED9EE6A17464"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6C826191-A68F-4E02-945B-73F35AA580F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A316AF53-7E95-4E4F-8E50-22145F144CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C7D3F068-778E-4BB7-AB22-368714BE1BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"96330C24-C1AB-4B00-A3CC-5CCD291E0069"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"BEF630C7-2AAB-4106-BAC9-AAE6FF278E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BF58206E-3086-45AC-91B6-032EF55D5552"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"7D636603-65D5-45DB-AF7F-DD01B3932914"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"97027262-849C-4DE9-90C9-0D9FBBC9F96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8658539D-27D8-47EE-9468-A6B625E6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7A4D6E89-5313-4016-8A7E-036579330DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"95A8E226-FCEC-4545-A628-24F5A8103BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"4551","Ordinal":"1","Title":"CVE-2008-4551","CVE":"CVE-2008-4551","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"4551","Ordinal":"1","NoteData":"strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP).","Type":"Description","Title":"CVE-2008-4551"},{"CveYear":"2008","CveId":"4551","Ordinal":"2","NoteData":"2008-10-14","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"4551","Ordinal":"3","NoteData":"2009-02-26","Type":"Other","Title":"Modified"}]}}}