CVE-2016-5736

The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before...

CVE-2016-5736: Improper Access Control

The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before...

F5 BIG-IP - BIG-IP IPsec IKE peer listener vulnerability CVE-2016-5736

The anonymous IPsec IKE peer configuration object is present and enabled in the default configuration. The settings of the anonymous IPsec IKE peer object allow an arbitrary peer to establish IKE phase 1 without certificate validation or a pre-shared key which may expose phase 2 negotiations to a...

F5 Networks BIG-IP : BIG-IP IPsec IKE peer listener vulnerability (K10133477)

The anonymous IPsec IKE peer configuration object is present and enabled in the default configuration. The settings of the anonymous IPsec IKE peer object allow an arbitrary peer to establish IKE phase 1 without certificate validation or a pre-shared key which may expose phase 2 negotiations to a...

SOL10133477 - BIG-IP IPsec IKE peer listener vulnerability CVE-2016-5736

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

[SECURITY] Fedora 23 Update: libreswan-3.18-1.fc23

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

1-click IPSEC VPN in the Cloud: algo

1-click IPSEC VPN in the Cloud Algo short for “Al Gore”, the V ice P resident of N etworks everywhere for inventing the Internet is a set of Ansible scripts that simplifies the setup of an IPSEC VPN. It contains the most secure defaults available, works with common cloud providers, and does not...

[SECURITY] Fedora 24 Update: libreswan-3.18-1.fc24

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Siemens SICAM RTU Devices Denial-of-Service Vulnerability

OVERVIEW Stephan Beirer, Markus Mahrla, Toralf Gimpel, and Sebastian Krause, from GAI NetConsult GmbH, and Adam Crain of Automatak LLC have identified a denial-of-service vulnerability in Siemens SICAM products. Siemens has produced a firmware update to mitigate this vulnerability. This...

Code injection

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

CVE-2016-1379

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

CVE-2016-1379

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

CVE-2016-1379

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

CVE-2016-1379

CVE-2016-1379 affects Cisco ASA Software 9.0–9.5.1 where IPsec error handling mishandling in the IPsec code can be triggered by crafted LAN-to-LAN or Remote Access VPN tunnel packets, allowing an authenticated remote attacker to exhaust memory and cause DoS (traffic forwarding may stop). Cisco’s ...

CVE-2016-1379: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

Cisco Adaptive Security Appliance VPN Memory Block Exhaustion Vulnerability (cisco-sa-20160517-asa-vpn)

A vulnerability in the IPsec code of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause the depletion of a memory block, which may cause the system to stop forwarding traffic and result in a denial of service DoS condition. Copyright C 2016...

Cisco Adaptive Security Appliance VPN Memory Block Exhaustion Vulnerability

A vulnerability in the IPsec code of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause the depletion of a memory block, which may cause the system to stop forwarding traffic and result in a denial of service DoS condition. The vulnerability is d...

Cisco IOS and IOS XE Software IKEv1 State Machine Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKEv1 state machine of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to tear down valid IPsec connections, resulting in a partial denial of service DoS condition. The vulnerability is due to insufficient condition...

SOL93600123 - OpenSSL vulnerability CVE-2016-2107

2 IPsec is vulnerable only in phase 1 IKE racoon, if configured to use AES-CBC. Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be no...

[SECURITY] Fedora 22 Update: libreswan-3.17-1.fc22

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...