Openswan and strongSwan DPD Packet Remote Denial Of Service Vulnerability

Bugtraq ID:	34296
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0790
Remote:	Yes
Local:	No
Published:	Mar 30 2009 12:00AM
Updated:	Apr 13 2015 09:41PM
Credit:	Gerd v. Egidy of Intra2net AG
Vulnerable:	SuSE SUSE Linux Enterprise Server 11 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 strongSwan strongSwan 4.2.13 strongSwan strongSwan 4.2.7 strongSwan strongSwan 4.2.6 strongSwan strongSwan 2.8.8 strongSwan strongSwan 2.1.3 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Openswan Openswan 2.6.20 Openswan Openswan 2.6.16 Openswan Openswan 2.4.13 Openswan Openswan 2.4.4 Openswan Openswan 2.4.2 Openswan Openswan 2.4 Openswan Openswan 2.3.1 Openswan Openswan 2.3 Openswan Openswan 2.2 Openswan Openswan 2.1.6 Openswan Openswan 2.1.5 + Redhat Fedora Core3 Openswan Openswan 2.1.4 Openswan Openswan 2.1.2 Openswan Openswan 2.1.1 Openswan Openswan 1.0.9 Openswan Openswan 1.0.8 Openswan Openswan 1.0.7 Openswan Openswan 1.0.6 Openswan Openswan 1.0.5 Openswan Openswan 1.0.4 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	strongSwan strongSwan 4.2.14 strongSwan strongSwan 2.8.9 Openswan Openswan 2.6.21 Openswan Openswan 2.4.14

Openswan and strongSwan DPD Packet Remote Denial Of Service Vulnerability

Openswan and strongSwan are prone to a remote denial-of-service vulnerability because they fail to properly handle certain Dead Peer Detection (DPD) packets.

Attackers can exploit this issue to crash the pluto IKE daemon, denying access to legitimate users.

Versions *prior to* the following are affected:

Openswan 2.6.21
Openswan 2.4.14
strongSwan 4.2.14
strongSwan 2.8.9

Openswan and strongSwan DPD Packet Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Openswan and strongSwan DPD Packet Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_arm.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_arm.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_arm.deb

Debian Linux 5.0 ia-64

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_ia64.deb


• Debian strongswan_4.2.4-5+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_ia64.deb

Debian Linux 4.0 powerpc

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_powerpc.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_powerpc.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva openswan-2.6.16-1.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva openswan-doc-2.6.16-1.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Debian Linux 4.0 m68k

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb

Debian Linux 5.0 alpha

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_alpha.deb


• Debian strongswan_4.2.4-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_i386.deb


• Debian strongswan_4.2.4-5+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_i386.deb

MandrakeSoft Enterprise Server 5

• Mandriva openswan-2.6.16-1.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva openswan-doc-2.6.16-1.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Debian Linux 5.0 s/390

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_s390.deb


• Debian strongswan_4.2.4-5+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_mipsel.deb


• Debian strongswan_4.2.4-5+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_mipsel.deb

Debian Linux 4.0 amd64

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_amd64.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_amd64.deb

Debian Linux 4.0 ia-32

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_i386.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_i386.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_i386.deb

Debian Linux 5.0 hppa

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_hppa.deb


• Debian strongswan_4.2.4-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_hppa.deb

Debian Linux 4.0 hppa

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_hppa.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_hppa.deb

Debian Linux 4.0 sparc

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_sparc.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_sparc.deb

Debian Linux 4.0 s/390

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_s390.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_s390.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_s390.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_s390.deb

Debian Linux 5.0 m68k

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb

Debian Linux 5.0 arm

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_arm.deb


• Debian strongswan_4.2.4-5+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_arm.deb

Debian Linux 4.0 alpha

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_alpha.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_alpha.deb

Debian Linux 4.0 armel

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb

Debian Linux 5.0 armel

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_armel.deb


• Debian strongswan_4.2.4-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_armel.deb

Debian Linux 5.0

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb

Debian Linux 4.0

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb

Debian Linux 4.0 mipsel

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_mipsel.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_mipsel.deb

Debian Linux 5.0 amd64

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_amd64.deb


• Debian strongswan_4.2.4-5+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_amd64.deb

Debian Linux 5.0 mips

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_mips.deb


• Debian strongswan_4.2.4-5+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_powerpc.deb


• Debian strongswan_4.2.4-5+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_powerpc.deb

Debian Linux 4.0 ia-64

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_ia64.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_ia64.deb

Debian Linux 4.0 mips

• Debian linux-patch-openswan_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan-modules-source_2.4.6+dfsg.2-1.1+etch1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.6+dfsg.2-1.1+etch1_all.deb


• Debian openswan_2.4.6+dfsg.2-1.1+etch1_mips.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.6 +dfsg.2-1.1+etch1_mips.deb


• Debian strongswan_2.8.0+dfsg-1+etch1_mips.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch1_mips.deb

Debian Linux 5.0 sparc

• Debian linux-patch-openswan_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/linux-patch-op enswan_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan-modules-source_2.4.12+dfsg-1.3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan-modul es-source_2.4.12+dfsg-1.3+lenny1_all.deb


• Debian openswan_2.4.12+dfsg-1.3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/o/openswan/openswan_2.4.1 2+dfsg-1.3+lenny1_sparc.deb


• Debian strongswan_4.2.4-5+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny1_sparc.deb

Openswan and strongSwan DPD Packet Remote Denial Of Service Vulnerability

References:

• Openswan Homepage (Openswan)
  
• Remote DoS Vulnerability in Openswan & Strongswan IPsec (Openswan)
  
• strongSwan Homepage (strongSwan)
  
• CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec (Paul Wouters )