[SECURITY] Fedora 19 Update: strongswan-5.1.3-1.fc19

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

[SECURITY] Fedora 20 Update: strongswan-5.1.3-1.fc20

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

CVE-2012-5017

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-0360

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

Memory corruption

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

Design/Logic Flaw

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-0360

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

CVE-2012-5017: Improper Input Validation

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-0360: Undefined Security Weakness

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

CVE-2012-5032: Improper Authentication

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

strongSwan IKEv2 SA验证绕过漏洞

CVE ID:CVE-2014-2338 strongSwan是一个完整的2.4和2.6的Linux内核下的IPsec和IKEv1的实现。它也完全支持新的IKEv2协议的Linux2.6内核。 strongSwan处理IKEv2 SA存在安全漏洞，允许远程攻击者利用漏洞绕过验证，进行授权访问。仅安装actively initiate或re-authenticate IKEv2 IKESAs的系统受此漏洞影响。 0 strongSwan 4.x strongSwan 5.x strongSwan 5.1.3版本已修复该漏洞，建议用户下载使用： http://strongswan.org...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

Authentication flaw

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

CVE-2014-2338 affects strongSwan’s IKEv2 implementation: remote attacker can bypass authentication by rekeying an IKE_SA during initiation or re-authentication, causing the IKE_SA to appear established. Technical details across connected docs indicate vulnerable releases include strongSwan up to ...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

SuSE 11.3 Security Update : strongswan (SAT Patch Number 9089)

The following security issue is fixed by this update : - strongswan has been updated to fix an authentication problem where attackers could have bypassed the IKEv2 authentication. CVE-2014-2338. bnc870572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

CVE-2014-2338: Improper Authentication

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...