CVE-2012-0360

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

Memory corruption

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

Design/Logic Flaw

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-0360

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

strongSwan IKEv2 SA验证绕过漏洞

CVE ID:CVE-2014-2338 strongSwan是一个完整的2.4和2.6的Linux内核下的IPsec和IKEv1的实现。它也完全支持新的IKEv2协议的Linux2.6内核。 strongSwan处理IKEv2 SA存在安全漏洞，允许远程攻击者利用漏洞绕过验证，进行授权访问。仅安装actively initiate或re-authenticate IKEv2 IKESAs的系统受此漏洞影响。 0 strongSwan 4.x strongSwan 5.x strongSwan 5.1.3版本已修复该漏洞，建议用户下载使用： http://strongswan.org...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

Authentication flaw

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

CVE-2014-2338 affects strongSwan’s IKEv2 implementation: remote attacker can bypass authentication by rekeying an IKE_SA during initiation or re-authentication, causing the IKE_SA to appear established. Technical details across connected docs indicate vulnerable releases include strongSwan up to ...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

SuSE 11.3 Security Update : strongswan (SAT Patch Number 9089)

The following security issue is fixed by this update : - strongswan has been updated to fix an authentication problem where attackers could have bypassed the IKEv2 authentication. CVE-2014-2338. bnc870572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Debian DSA-2903-1 : strongswan - security update

An authentication bypass vulnerability was found in charon, the daemon handling IKEv2 in strongSwan, an IKE/IPsec suite. The state machine handling the security association IKESA handled some state transitions incorrectly. An attacker can trigger the vulnerability by rekeying an unestablished IKE...

[SECURITY] [DSA 2903-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2903-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 14, 2014 http://www.debian.org/security/faq -...

DSA-2903-1 strongswan - security update

Bulletin has no description...

Debian Security Advisory DSA 2903-1 (strongswan - security update)

An authentication bypass vulnerability was found in charon, the daemon handling IKEv2 in strongSwan, an IKE/IPsec suite. The state machine handling the security association IKESA handled some state transitions incorrectly. An attacker can trigger the vulnerability by rekeying an unestablished IKE...

Debian: Security Advisory (DSA-2903-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS Software Internet Key Exchange Version 2 (IKEv2) Denial of Service (cisco-sa-20140326-ikev2)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Internet Key Exchange Version 2 IKEv2 module. An unauthenticated, remote attacker could potentially exploit this issue by sending a malformed IKEv2...

Cisco IOS XE Software Internet Key Exchange Version 2 (IKEv2) Denial of Service (cisco-sa-20140326-ikev2)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Internet Key Exchange Version 2 IKEv2 module. An unauthenticated, remote attacker could potentially exploit this issue by sending a malformed IKEv...