Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

strongswan strongswan 4.2.12 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 up to and including 5.x prior to 5.3.4 does not properly validate local state, which allows remote malicious users to bypass authentication via an empty Success message in respo...
Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Strongswan Strongswan 5.2.3Strongswan Strongswan 4.3.7Strongswan Strongswan 4.2.12Strongswan Strongswan 5.1.2Strongswan Strongswan 4.2.16Strongswan Strongswan 4.5.3Strongswan Strongswan 4.5.2Strongswan Strongswan 5.0.1Strongswan Strongswan 5.3.2Strongswan Strongswan 4.4.0Strongswan Strongswan 5.2.2Strongswan Strongswan 5.1.0Strongswan Strongswan 4.5.1Strongswan Strongswan 4.2.14Strongswan Strongswan 4.3.5Strongswan Strongswan 5.2.0Strongswan Strongswan 5.1.3Strongswan Strongswan 4.3.2Strongswan Strongswan 4.6.4
NA
CVE-2014-2338
IKEv2 in strongSwan 4.0.7 prior to 5.1.3 allows remote malicious users to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
Strongswan Strongswan 5.1.2Strongswan Strongswan 5.1.1Strongswan Strongswan 4.6.0Strongswan Strongswan 4.6.1Strongswan Strongswan 4.5.3Strongswan Strongswan 4.4.0Strongswan Strongswan 5.0.1Strongswan Strongswan 5.0.2Strongswan Strongswan 4.6.4Strongswan Strongswan 4.5.0Strongswan Strongswan 4.3.2Strongswan Strongswan 4.3.3Strongswan Strongswan 4.2.10Strongswan Strongswan 4.2.11Strongswan Strongswan 4.3.6Strongswan Strongswan 4.3.7Strongswan Strongswan 4.2.14Strongswan Strongswan 4.2.15Strongswan Strongswan 4.2.7Strongswan Strongswan 4.2.8Strongswan Strongswan 4.2.9Strongswan Strongswan 4.1.4
NA
CVE-2013-2054
Buffer overflow in the atodn function in strongSwan 2.0.0 up to and including 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote malicious users to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via ...
Strongswan Strongswan 2.4.3Strongswan Strongswan 2.5.7Strongswan Strongswan 2.4.2Strongswan Strongswan 4.1.8Strongswan Strongswan 4.1.11Strongswan Strongswan 2.6.16Strongswan Strongswan 2.5.3Strongswan Strongswan 2.8.0Strongswan Strongswan 4.2.6Strongswan Strongswan 2.8.1Strongswan Strongswan 2.4.4Strongswan Strongswan 2.6.0Strongswan Strongswan 2.3.0Strongswan Strongswan 4.2.12Strongswan Strongswan 4.1.1Strongswan Strongswan 2.7.2Strongswan Strongswan 4.2.10Strongswan Strongswan 2.1.0Strongswan Strongswan 2.1.5Strongswan Strongswan 2.0.2Strongswan Strongswan 2.8.9Strongswan Strongswan 2.8.8
NA
CVE-2012-2388
The GMP Plugin in strongSwan 4.2.0 up to and including 4.6.3 allows remote malicious users to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."
Strongswan Strongswan 4.2.16Strongswan Strongswan 4.2.9Strongswan Strongswan 4.2.6Strongswan Strongswan 4.2.15Strongswan Strongswan 4.2.1Strongswan Strongswan 4.3.2Strongswan Strongswan 4.6.0Strongswan Strongswan 4.6.1Strongswan Strongswan 4.4.1Strongswan Strongswan 4.2.11Strongswan Strongswan 4.2.10Strongswan Strongswan 4.2.5Strongswan Strongswan 4.2.0Strongswan Strongswan 4.3.5Strongswan Strongswan 4.4.0Strongswan Strongswan 4.5.1Strongswan Strongswan 4.5.0Strongswan Strongswan 4.2.13Strongswan Strongswan 4.2.12Strongswan Strongswan 4.2.3Strongswan Strongswan 4.2.4Strongswan Strongswan 4.3.4
NA
CVE-2009-2661
The asn1_length function in strongSwan 2.8 prior to 2.8.11, 4.2 prior to 4.2.17, and 4.3 prior to 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote malicious users to cause a denial of service (pluto IKE daemon...
Strongswan Strongswan 2.8.5Strongswan Strongswan 2.8.6Strongswan Strongswan 4.2.12Strongswan Strongswan 4.2.0Strongswan Strongswan 2.8.10Strongswan Strongswan 4.2.16Strongswan Strongswan 2.8.3Strongswan Strongswan 2.8.4Strongswan Strongswan 4.2.13Strongswan Strongswan 4.2.14Strongswan Strongswan 4.3.1Strongswan Strongswan 4.3.2Strongswan Strongswan 2.8.1Strongswan Strongswan 2.8.2Strongswan Strongswan 4.2.3Strongswan Strongswan 4.2.15Strongswan Strongswan 4.2.10Strongswan Strongswan 4.3.0Strongswan Strongswan 2.8.0Strongswan Strongswan 2.8.7Strongswan Strongswan 2.8.8Strongswan Strongswan 4.2.2
NA
CVE-2009-2185
The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 prior to 2.8.10, 4.2 prior to 4.2.16, and 4.3 prior to 4.3.2; and (b) openSwan 2.6 prior to 2.6.22 and 2.4 prior to 2.4.15 allows remote malicious users to cause a d...
Strongswan Strongswan 2.8.6Strongswan Strongswan 2.8.5Strongswan Strongswan 4.2.6Strongswan Strongswan 4.2.2Strongswan Strongswan 4.2.13Strongswan Strongswan 4.2.12Strongswan Strongswan 2.8.9Strongswan Strongswan 4.2.15Xelerance Openswan 2.6.18Xelerance Openswan 2.6.13Xelerance Openswan 2.6.06Xelerance Openswan 2.6.07Xelerance Openswan 2.4.9Xelerance Openswan 2.4.1Strongswan Strongswan 2.8.2Strongswan Strongswan 2.8.1Strongswan Strongswan 4.2.5Strongswan Strongswan 4.2.9Strongswan Strongswan 4.2.10Strongswan Strongswan 4.2.1Xelerance Openswan 2.6.16Xelerance Openswan 2.6.20
NA
CVE-2009-1958
charon/sa/tasks/child_create.c in the charon daemon in strongSWAN prior to 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote malicious users to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector.
Strongswan Strongswan 4.0.3Strongswan Strongswan 4.1.10Strongswan Strongswan 4.1.6Strongswan Strongswan 4.1.7Strongswan Strongswan 4.2.4Strongswan Strongswan 4.2.5Strongswan StrongswanStrongswan Strongswan 2.4.0aStrongswan Strongswan 2.1.4Strongswan Strongswan 2.1.3Strongswan Strongswan 2.3.1Strongswan Strongswan 2.4.2Strongswan Strongswan 2.4.3Strongswan Strongswan 2.5.2Strongswan Strongswan 4.1.0Strongswan Strongswan 4.1.2Strongswan Strongswan 4.1.5Strongswan Strongswan 4.1.4Strongswan Strongswan 4.2.10Strongswan Strongswan 4.2.2Strongswan Strongswan 4.2.3Strongswan Strongswan 4.2.12
NA
CVE-2009-0790
The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 prior to 2.6.21 and 2.4 prior to 2.4.14, and Strongswan 4.2 prior to 4.2.14 and 2.8 prior to 2.8.9, allows remote malicious users to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R...
Strongswan Strongswan 4.2.0Strongswan Strongswan 4.2.1Strongswan Strongswan 4.2.12Strongswan Strongswan 4.2.11Strongswan Strongswan 2.8.2Strongswan Strongswan 2.8.3Strongswan Strongswan 2.4.1Strongswan Strongswan 2.4.0aXelerance Openswan 2.6.07Xelerance Openswan 2.6.08Xelerance Openswan 2.6.16Xelerance Openswan 2.4.0Xelerance Openswan 2.4.3Xelerance Openswan 2.4.5Strongswan Strongswan 2.6.1Strongswan Strongswan 2.6.2Strongswan Strongswan 4.2.4Strongswan Strongswan 4.2.5Strongswan Strongswan 4.2.7Strongswan Strongswan 2.8.8Strongswan Strongswan 2.8.6Strongswan Strongswan 2.8.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook