Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0164

An update of 'ncurses', 'strongswan' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2018-0164

Updates of 'ncurses', 'strongswan' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2018-0075

Updates of 'libmspack', 'strongswan' packages of Photon OS have been released...

strongSwan Denial of Service Vulnerability (CNVD-2018-14260)

strongSwan is an open source IPsec-based VPN solution for Linux platforms maintained by Swiss software developer Andreas Steffen. The solution includes authentication mechanisms such as X.509 public key certificates, secure storage of private keys, and smart cards. A security vulnerability exists...

Design/Logic Flaw

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

CVE-2018-10811

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

CVE-2018-10811

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

DEBIAN-CVE-2018-10811

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

ALPINE-CVE-2018-10811

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

CVE-2018-10811

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

CVE-2018-10811

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

CVE-2018-10811

CVE-2018-10811 affects strongSwan (5.6.0 and older). Root cause: a missing initialization of a variable in the IKEv2 key derivation, enabling a remote attacker to trigger a denial-of-service condition. Public disclosures describe DoS via specially crafted requests, with CVSS in the 5.x range (bas...

Security Bulletin: A vulnerability in strongSwan affects IBM Flex System Manager (FSM) (CVE-2017-11185)

Summary A vulnerability has been discovered in strongSwan that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2017-11185 DESCRIPTION: strongSwan is vulnerable to a denial of service, caused by a NULL pointer dereference in gmp plugin. By using a...

Security Bulletin: Multiple vulnerabilities in strongswan affect IBM Flex System Manager (FSM) (CVE-2017-9023, CVE-2017-9022)

Summary Multiple vulnerabilities have been identified in strongswan that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-9023 DESCRIPTION: strongSwan is vulnerable to a denial of service, caused by the improper handling of CHOICE types ...

Security Bulletin: A vulnerability in strongSwan affects IBM Flex System Manager (FSM) (CVE-2015-8023)

Summary A security vulnerability has been discovered in strongSwan that is embedded in the IBM FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2015-8023 DESCRIPTION: strongSwan could allow a remote attacker to bypass security restrictions, caused by the failure to...

Security Bulletin: A vulnerability in strongSwan affects PowerKVM (CVE-2015-8023)

Summary PowerKVM is affected by a vulnerability in strongSwan. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-8023 DESCRIPTION: strongSwan could allow a remote attacker to bypass security restrictions, caused by the failure to properly validate local state by the server...

Security Bulletin: IBM Flex System Manager is affected by a vulnerability from FSM’s use of strongswan: (CVE-2015-4171)

Summary There is a security vulnerability in strongswan that is used by IBM Flex System Manager FSM. Vulnerability Details CVEID: CVE-2015-4171 DESCRIPTION: strongSwan could allow a remote authenticated attacker to obtain sensitive information, caused by an error in IKEv2 connections related to...

Debian DSA-4229-1 : strongswan - security update

Two vulnerabilities were discovered in strongSwan, an IKE/IPsec suite. - CVE-2018-5388 The stroke plugin did not verify the message length when reading from its control socket. This vulnerability could lead to denial of service. On Debian write access to the socket requires root permission on...

[SECURITY] [DSA 4229-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4229-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 14, 2018 https://www.debian.org/security/faq -...

Fedora Update for strongswan FEDORA-2018-0de3edbdea

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...