CVE-2018-5389 CVE-2018-5389

🗓️ 06 Sep 2018 21:00:00Reported by certccType

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks and key pair reuse could lead to cross-protocol authentication bypasses

Reporter	Title	Published	Views	Family All 19
CVE	CVE-2018-5389	6 Sep 201821:00	–	cve
Debian CVE	CVE-2018-5389	6 Sep 201821:00	–	debiancve
EUVD	EUVD-2018-17159	7 Oct 202500:30	–	euvd
F5 Networks	K42378447: IPsec IKEv1 vulnerability CVE-2018-5389	21 Feb 202318:33	–	f5
Tenable Nessus	F5 Networks BIG-IP : IPsec IKEv1 vulnerability (K42378447)	2 Nov 202300:00	–	nessus
Tenable Nessus	RHEL 5 : openswan (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 6 : openswan (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 7 : openswan (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 8 : openswan (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2018-5389	4 Mar 202500:00	–	nessus

[
  {
    "vendor": "strongSwan",
    "product": "Strongswan",
    "versions": [
      {
        "status": "affected",
        "version": "5.5.1"
      }
    ]
  }
]

Source	Link
blogs	www.blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key
web-in-security	www.web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.html
my	www.my.f5.com/manage/s/article/K42378447
kb	www.kb.cert.org/vuls/id/857035
usenix	www.usenix.org/system/files/conference/usenixsecurity18/sec18-felsch.pdf

24 Jun 2024 19:08Current

5.6Medium risk

Vulners AI Score5.6

EPSS0.03038