logo
DATABASE RESOURCES PRICING ABOUT US

Debian DLA-2909-1 : strongswan - LTS security update

Description

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2909 advisory. - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication. (CVE-2021-45079) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.


Related