USN-2628-1 strongswan vulnerability

Alexander E. Patrakov discovered that strongSwan incorrectly handled certain IKEv2 setups. A malicious server could possibly use this issue to obtain user credentials...

UBUNTU-CVE-2015-4171

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtai...

Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20150604) (Logjam)

A flaw was found in the way the TLS protocol composes the Diffie-Hellman DH key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic. CVE-2015-4000 Note: This update forces the...

Cisco Adaptive Security Appliance XAUTH Security Feature Bypass Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security feature bypass vulnerability exists in the Cisco Adaptive Security Appliance, which can be exploited by an authenticated remote attacker to bypass XAUTH...

RHEL 6 / 7 : openssl (RHSA-2015:1072) (Logjam)

Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

PT-2015-5505

Name of the Vulnerable Software and Affected Versions IBM Java 8 versions before SR1 Description The issue allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider. Additionally, a vulnerability in IBM SSL/TLS...

[SECURITY] [DLA 234-1] ipsec-tools security update

Package : ipsec-tools Version : 1:0.7.3-12+deb6u1 CVE ID : CVE-2015-4047 Debian Bug : 785778 Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted U...

DLA-234-1 ipsec-tools - security update

Bulletin has no description...

Apple Safari ECDHE-ECDSA Remote Denial of Service Vulnerability

Safari is the browser in Mac OS X, the latest operating system for Apple computers. A remote denial of service vulnerability exists in Apple Safari ECDHE-ECDSA, which can be exploited by an attacker to cause a crash in an affected application...

Debian Security Advisory DSA 3272-1 (ipsec-tools - security update)

Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted UDP packets, resulting in a denial of service. OpenVAS Vulnerability Test $Id: deb3272.nasl 66...

DSA-3272-1 ipsec-tools - security update

Bulletin has no description...

TLS Export-Grade Key Exchange Detection

Binary data 7168.pasl...

SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:0281-1)

This strongswan update fixes the following security and non security issues. - Disallow brainpool elliptic curve groups in fips mode bnc856322. - Applied an upstream fix for a denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellma...

SUSE SLED12 Security Update : libssh (SUSE-SU-2014:1731-1)

This libssh update fixes the following security issue : - bsc910790: Double free on dangling pointers in initial key exchange packet CVE-2014-8132. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)

It was discovered that OpenSSL would accept ephemeral RSA keys when using non-export RSA cipher suites. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method...

OpenSSL DHE Client Key Exchange Denial of Service (CVE-2015-1787)

A denial of service vulnerability exists in OpenSSL. The vulnerability is due to a null pointer dereference that occurs when an OpenSSL application receives and processes a Client Certificate and a crafted Client Key Exchange handshake message.A remote, unauthenticated attacker can exploit this...

MGASA-2015-0209 Updated libssh packages fix CVE-2015-3146

Updated libssh packages fix security vulnerability: libssh versions 0.5.1 and above, but before 0.6.5, have a logical error in the handling of a SSHMSGNEWKEYS and SSHMSGKEXDHREPLY package. A detected error did not set the session into the error state correctly and further processed the packet whi...

libssh 'ssh_packet_kexdh_init()' denial of service vulnerability

libssh is a C library that implements the SSH2 protocol. In versions of libssh before 0.6.5, an error in the "sshpacketkexdhinit" function src/server.c when processing SSHMSGNEWKEYS and SSHMSGKEXDHREPLY packets can be exploited to cause a denial of service...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure device reboot by sending specially crafted IKEv2 packets over IPv4 or IPv6...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure memory exhaustion and device reboot by sending specially crafted IKEv2 packets over IPv4 or IPv6...