openSUSE Security Update : strongswan (openSUSE-SU-2015:0114-1)

This update fixes the following security issues : - denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellman group 1025 bsc910491,CVE-2014-9221. - Applied an upstream patch reverting to store algorithms in the registration order...

Ubuntu: Security Advisory (USN-2450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Strongswan DoS

DoS on IKEv2 key exchange...

[SECURITY] [DSA 3118-1] strongswan security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3118-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 05, 2015 http://www.debian.org/security/faq -...

Strongswan IKEv2 Payloads Remote Denial of Service Vulnerability

strongSwan is a complete implementation of IPsec and IKEv1 for the 2.4 and 2.6 Linux kernels. It also fully supports the new IKEv2 protocol for the Linux 2.6 kernel. A remote denial of service vulnerability exists in Strongswan IKEv2 Payloads, which could be exploited by an attacker to crash an...

CVE-2014-9221

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

CVE-2014-9221

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

DEBIAN-CVE-2014-9221

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

Null pointer dereference

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

CVE-2014-9221

CVE-2014-9221 affects strongSwan’s IKEv2 KE handling with DH group 1025, causing a NULL pointer dereference and potential denial of service. Public details in connected advisories confirm the flaw exists in strongSwan 4.5.x–5.2.x (before 5.2.1) and can crash the IKE daemon on receiving a crafted ...

CVE-2014-9221

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

CVE-2014-9221

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

Debian DSA-3118-1 : strongswan - security update

Mike Daskalakis reported a denial of service vulnerability in charon, the IKEv2 daemon for strongSwan, an IKE/IPsec suite used to establish IPsec protected links. The bug can be triggered by an IKEv2 Key Exchange KE payload that contains the Diffie-Hellman DH group 1025. This identifier is from t...

Ubuntu 14.04 LTS : strongSwan vulnerability (USN-2450-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2450-1 advisory. Mike Daskalakis discovered that strongSwan incorrectly handled IKEv2 payloads that contained the Diffie- Hellman group 1025. A remote attacker could use this issu...

USN-2450-1 strongswan vulnerability

Mike Daskalakis discovered that strongSwan incorrectly handled IKEv2 payloads that contained the Diffie-Hellman group 1025. A remote attacker could use this issue to cause the IKE daemon to crash, resulting in a denial of service...

USN-2450-1: strongSwan vulnerability

Mike Daskalakis discovered that strongSwan incorrectly handled IKEv2 payloads that contained the Diffie-Hellman group 1025. A remote attacker could use this issue to cause the IKE daemon to crash, resulting in a denial of service...

[SECURITY] [DSA 3118-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3118-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 05, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3118-1 (strongswan - security update)

Mike Daskalakis reported a denial of service vulnerability in charon, the IKEv2 daemon for strongSwan, an IKE/IPsec suite used to establish IPsec protected links. The bug can be triggered by an IKEv2 Key Exchange KE payload that contains the Diffie-Hellman DH group 1025. This identifier is from t...

DSA-3118-1 strongswan - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3118-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...