CVE-2009-0790

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.

• CWE-20

• http://download.strongswan.org/CHANGES4.txtVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
• http://secunia.com/advisories/34472Vendor Advisory
• http://secunia.com/advisories/34483Vendor Advisory
• http://secunia.com/advisories/34494Vendor Advisory
• http://secunia.com/advisories/34546Vendor Advisory
• http://www.debian.org/security/2009/dsa-1759Patch
• http://www.debian.org/security/2009/dsa-1760Patch
• http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txtVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2009-0402.html
• http://www.securityfocus.com/archive/1/502270/100/0/threaded
• http://www.securityfocus.com/bid/34296Patch
• http://www.securitytracker.com/id?1021949
• http://www.securitytracker.com/id?1021950
• http://www.vupen.com/english/advisories/2009/0886
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49523
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171
• http://download.strongswan.org/CHANGES4.txtVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
• http://secunia.com/advisories/34472Vendor Advisory
• http://secunia.com/advisories/34483Vendor Advisory
• http://secunia.com/advisories/34494Vendor Advisory
• http://secunia.com/advisories/34546Vendor Advisory
• http://www.debian.org/security/2009/dsa-1759Patch
• http://www.debian.org/security/2009/dsa-1760Patch
• http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txtVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2009-0402.html
• http://www.securityfocus.com/archive/1/502270/100/0/threaded
• http://www.securityfocus.com/bid/34296Patch
• http://www.securitytracker.com/id?1021949
• http://www.securitytracker.com/id?1021950
• http://www.vupen.com/english/advisories/2009/0886
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49523
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171

Published

Apr 1, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0784Race condition in the SystemTap stap tool 0.0.20080705 and 0…
• CVE-2009-0785Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-0786Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-0787The ecryptfs_write_metadata_to_contents function in the eCry…
• CVE-2009-0788Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not …
• CVE-2009-0789OpenSSL before 0.9.8k on WIN64 and certain other platforms d…
• CVE-2009-0791Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0…
• CVE-2009-0792Multiple integer overflows in icc.c in the International Col…
• CVE-2009-0793cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used …
• CVE-2009-0794Integer overflow in the PulseAudioTargetDataL class in src/j…
• CVE-2009-0795Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-0796Cross-site scripting (XSS) vulnerability in Status.pm in Apa…