Lucene search
Gentoo FoundationGLSA-201412-26HistoryDec 13, 2014 - 12:00 a.m.
strongSwan: Multiple Vulnerabilities
2014-12-1300:00:00
Gentoo Foundation
security.gentoo.org
11
0.044 Low
EPSS
Percentile
92.3%
Background
strongSwan is an IPSec implementation for Linux.
Description
A NULL pointer dereference and an error in the IKEv2 implementation have been found in strongSwan.
Impact
A remote attacker could create a Denial of Service condition or bypass security restrictions.
Workaround
There is no known workaround at this time.
Resolution
All strongSwan users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/strongswan-5.1.3"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-misc/strongswan | < 5.1.3 | UNKNOWN |
Related
nessus
nessus
GLSA-201412-26 : strongSwan: Multiple Vulnerabilities
2014-12-15 00:00:00
openSUSE Security Update : strongswan (openSUSE-SU-2014:0697-1)
2014-06-13 00:00:00
Fedora 20 : strongswan-5.1.3-1.fc20 (2014-5231)
2014-04-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-26
2015-09-29 00:00:00
Debian Security Advisory DSA 2903-1 (strongswan - security update)
2014-04-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0529-1)
2021-06-09 00:00:00
ibm
ibm
securityvulns
securityvulns
Openswan / Strongswan security vulnerabilities
2014-05-07 00:00:00
[SECURITY] [DSA 2903-1] strongswan security update
2014-05-04 00:00:00
[SECURITY] [DSA 2922-1] strongswan security update
2014-05-07 00:00:00
suse
suse
Security update for strongswan (important)
2014-04-15 21:04:16
freebsd
freebsd
strongswan -- Remote Authentication Bypass
2014-03-12 00:00:00
prion
prion
Authentication flaw
2014-04-16 18:37:00
Null pointer dereference
2014-05-07 10:55:00
seebug
seebug
strongSwan IKEv2 SA验证绕过漏洞
2014-04-18 00:00:00
cve
cve
CVE-2014-2338
2014-04-16 18:37:00
CVE-2014-2891
2014-05-07 10:55:00
debian
debian
[SECURITY] [DSA 2903-1] strongswan security update
2014-04-14 15:01:58
[SECURITY] [DSA 2922-1] strongswan security update
2014-05-05 12:56:23
cvelist
cvelist
CVE-2014-2338
2014-04-16 18:00:00
CVE-2014-2891
2014-05-07 10:00:00
osv
osv
strongswan - security update
2014-04-14 00:00:00
strongswan - security update
2014-05-05 00:00:00
debiancve
debiancve
CVE-2014-2338
2014-04-16 18:37:00
CVE-2014-2891
2014-05-07 10:55:00
ubuntucve
ubuntucve
CVE-2014-2338
2014-04-16 00:00:00
CVE-2014-2891
2014-04-25 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: strongswan-5.1.3-1.fc20
2014-04-24 07:35:30
[SECURITY] Fedora 19 Update: strongswan-5.1.3-1.fc19
2014-04-24 07:41:29