SUSE CVE-2009-2661

The asn1length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names RDNs, which allows remote attackers to cause a denial of service pluto IKE daemon crash via malformed ASN.1 data...

SUSE CVE-2011-3266

The prototreeadditem function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service infinite loop via vectors involving a malformed IKE packet and many items in a tree...

SUSE CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

SUSE CVE-2015-4047

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a series of crafted UDP requests...

SUSE CVE-2015-4171

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtai...

SUSE CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

SUSE CVE-2018-16151

In verifyemsapkcs1signature in gmprsapublickey.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS1 v1.5 signature verification. Similar to the flaw in the same version of strongSwa...

SUSE CVE-2019-12312

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKESAINIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKEAUTH exchange. This affects...

SUSE CVE-2021-45079

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2 even without server authentication...

Denial of service

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2023-21683

Technical details about CVE-2023-21683 are not provided in the connected documents. Public information on affected products, root cause, or fixes is not present here. Monitor for updates from official sources.

CVE-2023-21758

Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.

CVE-2023-21677

Technical details (affected products, root cause, exploitability, and fixes) for CVE-2023-21677 are not provided in the supplied documents. No specifics on impact or remediation are present. Monitor for updates.

CVE-2023-21547

CVE-2023-21547 is a vulnerability in the Windows Internet Key Exchange (IKE) Extension causing a Denial-of-Service. Multiple connected sources identify it as a network-‑accessible issue in the IKE protocol that can be triggered remotely without user interaction, with the root cause described as a...

CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

CVE-2023-21677 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

Adversaries strike critical Windows IKE flaw in the “Bleed You” campaign

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary An active "Bleed You" campaign is leveraging a critical RCE CVE-2022-34721 vulnerability in Windows Internet Key Exchange IKE Protocol Extensions to assist subsequent malware and ransomware assaults and...

CVE-2022-40735

The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "appropriately short exponents" can be used when there are adequate subgroup constraints, and these sho...

Design/Logic Flaw

The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "appropriately short exponents" can be used when there are adequate subgroup constraints, and these sho...