CVE-2014-9221

Publication date 19 December 2014

Last updated 24 July 2024

Ubuntu priority

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
strongswan	17.04 zesty	Fixed 5.1.2-0ubuntu4
	16.10 yakkety	Fixed 5.1.2-0ubuntu4
	16.04 LTS xenial	Fixed 5.1.2-0ubuntu4
	15.10 wily	Fixed 5.1.2-0ubuntu4
	15.04 vivid	Fixed 5.1.2-0ubuntu4
	14.10 utopic	Fixed 5.1.2-0ubuntu3.2
	14.04 LTS trusty	Fixed 5.1.2-0ubuntu2.2
	12.04 LTS precise	Ignored
	10.04 LTS lucid	Ignored

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-2450-1
strongSwan vulnerability
5 January 2015

Other references

https://www.cve.org/CVERecord?id=CVE-2014-9221