strongSwan: Multiple Vulnerabilities

Background strongSwan is an IPSec implementation for Linux. Description A NULL pointer dereference and an error in the IKEv2 implementation have been found in strongSwan. Impact A remote attacker could create a Denial of Service condition or bypass security restrictions. Workaround There is no...

Openswan: Denial of service

Background Openswan is an implementation of IPsec for Linux. Description A NULL pointer dereference has been found in Openswan. Impact A remote attacker could create a Denial of Service condition. Workaround There is no known workaround at this time. Resolution Gentoo has discontinued support for...

openSUSE Security Update : strongswan (openSUSE-SU-2012:0691-1)

Strongswan's gmp plugin could treat empty RSA signature as valid ones %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-309. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : strongswan (openSUSE-SU-2010:0496-1)

Remote unauthenticated attackers could cause a buffer overflow in strongswan's IKE deamon by using specially crafted certificates or identify information. Attackers could potentially exploit that to execute code CVE-2010-2628. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

openSUSE Security Update : strongswan (openSUSE-SU-2013:1332-1)

This update of strongswan fixed a denial-of-service vulnerability, that could be triggered by special XAuth usernames and EAP identities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE 11.3 Security Update : strongswan (SAT Patch Number 9251)

This update fixes a NULL ptr dereference DoS via IDDERASN1DN ID payloads. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

openSUSE Security Update : strongswan (openSUSE-SU-2014:0697-1)

strongswan was fixed to correct two issues : - Fix for DoS vulnerability by a NULL pointer dereference CVE-2014-2891. - Fix for a authentication bypass vulnerability in the IKEv2 code CVE-2014-2338. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

openSUSE Security Update : strongswan (openSUSE-SU-2013:0775-1)

Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin bnc815236, CVE-2013-2944 0003-Check-return-value-of-ECDSAVerify-correctly.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

openSUSE Security Update : strongswan (openSUSE-SU-2013:0774-1)

Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin bnc815236, CVE-2013-2944 0003-Check-return-value-of-ECDSAVerify-correctly.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

openSUSE Security Update : strongswan (openSUSE-SU-2013:1646-1)

Applied upstream fix for a denial-of-service and authorization bypass vulnerability via crafted ID payload in strongswan 4.3.3 up to 5.1.0 CVE-2013-6075, bnc847506. 0005-strongswan-4.3.35.1.0-bnc-847506-CVE-2013-6075.pa tch - Added missed references to patch file 0003. %NASLMINLEVEL 70300 C...

openSUSE Security Update : strongswan (openSUSE-SU-2013:1333-1)

This update of strongswan fixed a denial-of-service vulnerability, that could be triggered by special XAuth usernames and EAP identities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : strongswan (openSUSE-SU-2013:0873-1)

Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin bnc815236, CVE-2013-2944 0003-Check-return-value-of-ECDSAVerify-correctly.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SUSE-SU-2015:1227-1 Security update for strongswan

This update fixes a NULL ptr dereference DoS via IDDERASN1DN ID payloads. Security Issue reference: CVE-2014-2891...

CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

DEBIAN-CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

Null pointer dereference

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

CVE-2014-2891

CVE-2014-2891 affects the strongSwan IPsec daemon and is a NULL pointer dereference vulnerability triggered by processing a crafted ID_DER_ASN1_DN payload, causing the IKE daemon to crash and enabling a denial-of-service. The issue is documented across multiple feeds (SUSE advisories, Gentoo GLSA...