CVE-2015-4171

2015-06-0800:00:00

ubuntu.com

0.004 Low

EPSS

Percentile

74.7%

JSON

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before
1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2
connection, does not enforce server authentication restrictions until the
entire authentication process is complete, which allows remote servers to
obtain credentials by using a valid certificate and then reading the
responses.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchstrongswan< 5.1.2-0ubuntu2.3UNKNOWN
ubuntu14.10noarchstrongswan< 5.1.2-0ubuntu3.3UNKNOWN
ubuntu15.04noarchstrongswan< 5.1.2-0ubuntu5.2UNKNOWN
ubuntu15.10noarchstrongswan< 5.1.2-0ubuntu6UNKNOWN
ubuntu16.04noarchstrongswan< 5.1.2-0ubuntu6UNKNOWN
ubuntu16.10noarchstrongswan< 5.1.2-0ubuntu6UNKNOWN
ubuntu17.04noarchstrongswan< 5.1.2-0ubuntu6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	strongswan	< 5.1.2-0ubuntu2.3	UNKNOWN
ubuntu	14.10	noarch	strongswan	< 5.1.2-0ubuntu3.3	UNKNOWN
ubuntu	15.04	noarch	strongswan	< 5.1.2-0ubuntu5.2	UNKNOWN
ubuntu	15.10	noarch	strongswan	< 5.1.2-0ubuntu6	UNKNOWN
ubuntu	16.04	noarch	strongswan	< 5.1.2-0ubuntu6	UNKNOWN
ubuntu	16.10	noarch	strongswan	< 5.1.2-0ubuntu6	UNKNOWN
ubuntu	17.04	noarch	strongswan	< 5.1.2-0ubuntu6	UNKNOWN