strongSwan vulnerability

2015-11-1600:00:00

ubuntu.com

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.9%

JSON

Releases

Ubuntu 15.10
Ubuntu 15.04
Ubuntu 14.04 ESM

Packages

strongswan - IPsec VPN solution

Details

It was discovered that the strongSwan eap-mschapv2 plugin incorrectly
handled state. A remote attacker could use this issue to bypass
authentication.

OSVersionArchitecturePackageVersionFilename
Ubuntu15.10noarchstrongswan-plugin-eap-mschapv2< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchlibstrongswan< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchlibstrongswan-dbgsym< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchstrongswan< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchstrongswan-dbg< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchstrongswan-ike< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchstrongswan-ike-dbgsym< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchstrongswan-ikev1< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchstrongswan-ikev2< 5.1.2-0ubuntu6.2UNKNOWN
Ubuntu15.10noarchstrongswan-nm< 5.1.2-0ubuntu6.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	15.10	noarch	strongswan-plugin-eap-mschapv2	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	libstrongswan	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	libstrongswan-dbgsym	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	strongswan	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	strongswan-dbg	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	strongswan-ike	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	strongswan-ike-dbgsym	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	strongswan-ikev1	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	strongswan-ikev2	< 5.1.2-0ubuntu6.2	UNKNOWN
Ubuntu	15.10	noarch	strongswan-nm	< 5.1.2-0ubuntu6.2	UNKNOWN