{
  "schema_version": "1.6.0",
  "id": "STRONGSWAN-CVE-2009-0790",
  "aliases": [
    "CVE-2009-0790"
  ],
  "modified": "2026-09-24T16:15:49Z",
  "affected": [
    {
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "4.0.0"
            },
            {
              "fixed": "4.2.14"
            }
          ]
        },
        {
          "type": "GIT",
          "repo": "https://github.com/strongswan/strongswan.git",
          "events": [
            {
              "introduced": "8ba0404004ae9b36d74598a3f2212973fffb343a"
            },
            {
              "fixed": "79b272949080bf5938df1c5affe7b4bc631a81b7"
            }
          ]
        }
      ]
    }
  ],
  "database_specific": {
    "package": "strongswan"
  },
  "references": [
    {
      "type": "WEB",
      "url": "https://download.strongswan.org/security/CVE-2009-0790"
    }
  ],
  "published": "2009-03-21T13:00:00Z",
  "summary": "A denial-of-service vulnerability where a DPD R_U_THERE or R_U_THERE_ACK NOTIFY message (Dead Peer Detection) not related to an existing ISAKMP Security Association causes an immediate crash of the IKEv1 pluto daemon while dereferencing a NULL state pointer."
}