GCVE - cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

Vendor	Strongswan (`9a563755-54e8-518c-a3b0-3167477e7a5c`)
Product	Strongswan (`09e669c3-3841-52c4-8ea4-6aa481714da4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/strongswan`	purl2cpe	2026-06-01 10:16:11.328275
`pkg:deb/ubuntu/strongswan`	purl2cpe	2026-06-01 10:16:11.328277
`pkg:docker/mberner/strongswan`	purl2cpe	2026-06-01 10:16:11.328279
`pkg:github/strongswan/strongswan`	purl2cpe	2026-06-01 10:16:11.328281
`pkg:npm/strongswan`	purl2cpe	2026-06-01 10:16:11.328282
`pkg:rpm/fedora/strongswan`	purl2cpe	2026-06-01 10:16:11.328284
`pkg:rpm/opensuse/strongswan`	purl2cpe	2026-06-01 10:16:11.328286
`pkg:strongswan/strongswan`	purl2cpe	2026-06-01 10:16:11.328288

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1958`	vulnerable	2026-06-08 04:51:25.955189	Details available charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector. Published: 2009-06-06T18:00:00.000Z Updated: 2024-08-07T05:36:19.542Z Open on db.gcve.eu Reference links http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme http://secunia.com/advisories/35296 http://secunia.com/advisories/36922 http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch https://lists.strongswan.org/pipermail/users/2009-May/003457.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1957`	vulnerable	2026-06-08 04:51:25.925555	Details available charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers "an incomplete state," followed by a CREATE_CHILD_SA request. Published: 2009-06-06T18:00:00.000Z Updated: 2024-08-07T05:36:19.193Z Open on db.gcve.eu Reference links http://secunia.com/advisories/35296 http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch http://secunia.com/advisories/36922 https://lists.strongswan.org/pipermail/users/2009-May/003457.html http://www.debian.org/security/2009/dsa-1899	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4551`	vulnerable	2026-06-08 04:50:39.247297	Details available strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP). Published: 2008-10-14T19:00:00.000Z Updated: 2024-08-07T10:17:09.920Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/2660 http://www.securitytracker.com/id?1020903 http://www.securityfocus.com/bid/31291 http://labs.mudynamics.com/advisories/MU-200809-01.txt http://secunia.com/advisories/31963	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.