Fedora Update for strongswan FEDORA-2014-5238

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : strongswan-5.1.3-1.fc20 (2014-5231)

This update fixes : - Bug 1081760 - CVE-2014-2338 strongswan: authentication bypass flaw in IKEv2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

UBUNTU-CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

Fedora 19 : strongswan-5.1.3-1.fc19 (2014-5238)

CVE-2014-2338 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a crafted IDDERASN1DN ID payload...

[SECURITY] Fedora 19 Update: strongswan-5.1.3-1.fc19

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

[SECURITY] Fedora 20 Update: strongswan-5.1.3-1.fc20

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

strongSwan IKEv2 SA验证绕过漏洞

CVE ID:CVE-2014-2338 strongSwan是一个完整的2.4和2.6的Linux内核下的IPsec和IKEv1的实现。它也完全支持新的IKEv2协议的Linux2.6内核。 strongSwan处理IKEv2 SA存在安全漏洞，允许远程攻击者利用漏洞绕过验证，进行授权访问。仅安装actively initiate或re-authenticate IKEv2 IKESAs的系统受此漏洞影响。 0 strongSwan 4.x strongSwan 5.x strongSwan 5.1.3版本已修复该漏洞，建议用户下载使用： http://strongswan.org...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

DEBIAN-CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

Authentication flaw

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

UBUNTU-CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

CVE-2014-2338 affects strongSwan’s IKEv2 implementation: remote attacker can bypass authentication by rekeying an IKE_SA during initiation or re-authentication, causing the IKE_SA to appear established. Technical details across connected docs indicate vulnerable releases include strongSwan up to ...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

CVE-2014-2338

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKESA during 1 initiation or 2 re-authentication, which triggers the IKESA state to be set to established...

SuSE 11.3 Security Update : strongswan (SAT Patch Number 9089)

The following security issue is fixed by this update : - strongswan has been updated to fix an authentication problem where attackers could have bypassed the IKEv2 authentication. CVE-2014-2338. bnc870572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Debian DSA-2903-1 : strongswan - security update

An authentication bypass vulnerability was found in charon, the daemon handling IKEv2 in strongSwan, an IKE/IPsec suite. The state machine handling the security association IKESA handled some state transitions incorrectly. An attacker can trigger the vulnerability by rekeying an unestablished IKE...

[SECURITY] [DSA 2903-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2903-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 14, 2014 http://www.debian.org/security/faq -...