Cisco IOS Malformed IKEv2 Message Processing Denial of Service Vulnerability (CNVD-2015-02087)

Cisco IOS is a popular Internet operating system. A security vulnerability exists in Cisco IOS and Cisco IOS XE that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks by sending specially crafted IKEv2 messages over IPv4 or IPv6...

Cisco IOS Malformed IKEv2 Message Processing Denial of Service Vulnerability (CNVD-2015-02088)

Cisco IOS is a popular Internet operating system. Cisco IOS and Cisco IOS XE have a security vulnerability that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks by sending specially crafted IKEv2 messages...

Strongswan IKEv2 Payloads Remote Denial of Service Vulnerability

strongSwan is a complete implementation of IPsec and IKEv1 for the 2.4 and 2.6 Linux kernels. It also fully supports the new IKEv2 protocol for the Linux 2.6 kernel. A remote denial of service vulnerability exists in Strongswan IKEv2 Payloads, which could be exploited by an attacker to crash an...

USN-2450-1 strongswan vulnerability

Mike Daskalakis discovered that strongSwan incorrectly handled IKEv2 payloads that contained the Diffie-Hellman group 1025. A remote attacker could use this issue to cause the IKE daemon to crash, resulting in a denial of service...

Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE...

Microsoft Windows 2000 Internet Key Exchange DoS Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE...

UBUNTU-CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

Cisco IOS XE Software Internet Key Exchange Version 2 (IKEv2) Denial of Service (cisco-sa-20140326-ikev2)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Internet Key Exchange Version 2 IKEv2 module. An unauthenticated, remote attacker could potentially exploit this issue by sending a malformed IKEv...

Cisco IOS Software Internet Key Exchange Version 2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected device that would lead to a denial of service DoS condition. The vulnerability is due to how an...

openswan: dereferencing missing IKEv2 payloads causes pluto daemon to restart

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

PT-2013-5625 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue concerns the VPN authentication functionality, which can be exploited by remote attackers to cause a denial of service, resulting in a devic...

Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability (cisco-sa-20130925-ike)

A vulnerability exists in the Internet Key Exchange IKE protocol of Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the affected software. ...

Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability

A vulnerability in the Internet Key Exchange IKE protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the...

CentOS Update for openswan CESA-2013:0827 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2013-2961 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A issue in the ISAKMP implementation allows remote attackers to enumerate groups via a series of IKE aggressive-mode messages, depending on whether...

Cisco IOS Software Internet Key Exchange Vulnerability (cisco-sa-20130327-ike)

The Cisco IOS Software Internet Key Exchange IKE feature contains a denial of service DoS vulnerability. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available. TRUSTED...

Cisco IOS Software Internet Key Exchange Vulnerability

The Cisco IOS Software Internet Key Exchange IKE feature contains a denial of service DoS vulnerability. Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available. This advisory is available at the following link:...

RedHat Update for openswan RHSA-2011:1356-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2012-1686 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.4 Description: The issue allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, due to the devices processing IKE...

Cisco IOS Internet Key Exchange Vulnerability (cisco-sa-20120328-ike)

The Cisco IOS Software Internet Key Exchange IKE feature contains a denial of service DoS vulnerability. Cisco has released free software updates that address this vulnerability. TRUSTED...