CVE-2014-2108

CVE-2014-2108 affects Cisco IOS/IOS XE: IOS 12.2 and 15.0–15.3, and IOS XE 3.2–3.7 before 3.7.5S and 3.8–3.10 before 3.10.1S are vulnerable. The root cause is how the Internet Key Exchange Version 2 (IKEv2) module processes certain malformed IKEv2 packets, enabling an unauthenticated remote attac...

Cisco IOS Software Internet Key Exchange Version 2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected device that would lead to a denial of service DoS condition. The vulnerability is due to how an...

strongswan -- Remote Authentication Bypass

strongSwan developers report: Remote attackers are able to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established. Only installations that actively initiate or re-authenticate IKEv2 IKESAs are affected...

Updated openswan packages fix CVE-2013-6466

Updated openswan packages fix security vulnerability: A NULL pointer dereference flaw was discovered in the way Openswan's IKE daemon processed IKEv2 payloads. A remote attacker could send specially crafted IKEv2 payloads that, when processed, would lead to a denial of service daemon crash,...

MGASA-2014-0097 Updated openswan packages fix CVE-2013-6466

Updated openswan packages fix security vulnerability: A NULL pointer dereference flaw was discovered in the way Openswan's IKE daemon processed IKEv2 payloads. A remote attacker could send specially crafted IKEv2 payloads that, when processed, would lead to a denial of service daemon crash,...

Openswan IKEv2负载远程拒绝服务漏洞

BUGTRAQ ID: 65155 CVECAN ID: CVE-2013-6466 Openswan是一款Linux系统下的IPSEC实现，基于FreeS/WAN项目。 Openswan 2.6.39及之前版本在实现上存在远程拒绝服务漏洞，攻击者通过畸形的IKEv2数据包，利用此漏洞可造成应用重启，导致拒绝服务。 0 Openswan Openswan = 2.6.39 厂商补丁： Openswan -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.openswan.org/...

Scientific Linux Security Update : openswan on SL5.x, SL6.x i386/x86_64 (20140218)

A NULL pointer dereference flaw was discovered in the way Openswan's IKE daemon processed IKEv2 payloads. A remote attacker could send specially crafted IKEv2 payloads that, when processed, would lead to a denial of service daemon crash, possibly causing existing VPN connections to be dropped...

RHEL 5 / 6 : openswan (RHSA-2014:0185)

Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CentOS 5 / 6 : openswan (CESA-2014:0185)

Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

openswan security update

CentOS Errata and Security Advisory CESA-2014:0185 Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS...

Fedora Update for libreswan FEDORA-2014-1121

Check for the Version of libreswan OpenVAS Vulnerability Test Fedora Update for libreswan FEDORA-2014-1121 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for strongswan FEDORA-2014-0516

Check for the Version of strongswan OpenVAS Vulnerability Test Fedora Update for strongswan FEDORA-2014-0516 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for strongswan FEDORA-2014-0567

Check for the Version of strongswan OpenVAS Vulnerability Test Fedora Update for strongswan FEDORA-2014-0567 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

Null pointer dereference

Libreswan 3.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

Null pointer dereference

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

CVE-2013-6467

Libreswan 3.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

CVE-2013-6467

CVE-2013-6467 affects Libreswan 3.7 and earlier, where IKEv2 payload handling could cause a NULL pointer dereference and IKE daemon restart, leading to a denial of service. The vulnerability is network-exploit via IKEv2 packets with missing payloads, with CVSSv2 base score 5.0 (NETWORK, LOW compl...

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...