4 matches found
SUSE-SU-2015:1791-1 Security update for strongswan
strongswan was updated to fix one security issue. This security issue was fixed: - CVE-2015-4171: A problem that could enable rogue servers to gain user credentials from a client in certain IKEv2 setups. bsc933591...
SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:1196-1)
Strongswan was updated to fix one security issue. The following vulnerability was fixed : - CVE-2015-4171: Rogue servers were able to authenticate themselves with certificate issued by any CA the client trusts, to gain user credentials from a client in certain IKEv2 setups bsc933591 Note that...
Ubuntu 14.04 LTS : strongSwan vulnerability (USN-2628-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2628-1 advisory. Alexander E. Patrakov discovered that strongSwan incorrectly handled certain IKEv2 setups. A malicious server could possibly use this issue to obtain user...
SUSE-SU-2015:1196-1 Security update for strongswan
Strongswan was updated to fix one security issue. The following vulnerability was fixed: CVE-2015-4171: Rogue servers were able to authenticate themselves with certificate issued by any CA the client trusts, to gain user credentials from a client in certain IKEv2 setups bsc933591...