← Database

CVE-2009-1958

MEDIUM CVSS: 5.0 Published: 2009-06-08 Modified: 2026-06-16

Description

charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector.

Affected Platforms

Strongswan Strongswan

Weakness Type

CWE-399

References