Security Bulletin: Vulnerabilities in Strongswan affect Power Hardware Management Console (CVE-2014-9221,CVE-2014-2891,CVE-2014-2338,CVE-2013-5018)

Summary Strongswan is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2014-9221 DESCRIPTION: strongSwan is vulnerable to a denial of service, caused by a NULL pointer dereference when handling malicious payloads. A remote...

SUSE: Security Advisory (SUSE-SU-2014:0793-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201412-26

Gentoo Linux Local Security Checks GLSA 201412-26 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

openSUSE Security Update : strongswan (openSUSE-SU-2014:0697-1)

strongswan was fixed to correct two issues : - Fix for DoS vulnerability by a NULL pointer dereference CVE-2014-2891. - Fix for a authentication bypass vulnerability in the IKEv2 code CVE-2014-2338. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

SUSE-SU-2015:1227-1 Security update for strongswan

This update fixes a NULL ptr dereference DoS via IDDERASN1DN ID payloads. Security Issue reference: CVE-2014-2891...

CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

CVE-2014-2891

CVE-2014-2891 affects the strongSwan IPsec daemon and is a NULL pointer dereference vulnerability triggered by processing a crafted ID_DER_ASN1_DN payload, causing the IKE daemon to crash and enabling a denial-of-service. The issue is documented across multiple feeds (SUSE advisories, Gentoo GLSA...

[SECURITY] [DSA 2922-1] strongswan security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2922-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez May 05, 2014 http://www.debian.org/security/faq -...