{
  "schema_version": "1.6.0",
  "id": "STRONGSWAN-CVE-2009-1957",
  "aliases": [
    "CVE-2009-1957"
  ],
  "modified": "2026-09-24T16:15:49Z",
  "affected": [
    {
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "4.1.0"
            },
            {
              "fixed": "4.3.1"
            }
          ]
        },
        {
          "type": "GIT",
          "repo": "https://github.com/strongswan/strongswan.git",
          "events": [
            {
              "introduced": "59c5a85313d14fae9197a629f2b7ca8d359b3c26"
            },
            {
              "fixed": "c22889b96cbcec857ad5f3739349e4d25f4ea61d"
            }
          ]
        }
      ]
    }
  ],
  "database_specific": {
    "package": "strongswan"
  },
  "references": [
    {
      "type": "WEB",
      "url": "https://download.strongswan.org/security/CVE-2009-1957"
    }
  ],
  "published": "2009-05-08T12:00:00Z",
  "summary": "A denial-of-service vulnerability where receiving a malformed IKE_SA_INIT request leaves an incomplete state that causes a crash of the IKEv2 charon daemon while dereferencing a NULL pointer if a subsequent CREATE_CHILD_SA is received."
}