Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

strongswan strongswan 4.6.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 up to and including 5.x prior to 5.3.4 does not properly validate local state, which allows remote malicious users to bypass authentication via an empty Success message in respo...
Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Strongswan Strongswan 5.2.3Strongswan Strongswan 4.3.7Strongswan Strongswan 4.2.12Strongswan Strongswan 5.1.2Strongswan Strongswan 4.2.16Strongswan Strongswan 4.5.3Strongswan Strongswan 4.5.2Strongswan Strongswan 5.0.1Strongswan Strongswan 5.3.2Strongswan Strongswan 4.4.0Strongswan Strongswan 5.2.2Strongswan Strongswan 5.1.0Strongswan Strongswan 4.5.1Strongswan Strongswan 4.2.14Strongswan Strongswan 4.3.5Strongswan Strongswan 5.2.0Strongswan Strongswan 5.1.3Strongswan Strongswan 4.3.2Strongswan Strongswan 4.6.4
NA
CVE-2015-4171
strongSwan 4.3.0 up to and including 5.x prior to 5.3.2 and strongSwan VPN Client prior to 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, whi...
Strongswan Strongswan Vpn ClientDebian Debian Linux 8.0Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Strongswan Strongswan 4.3.0Strongswan Strongswan 4.3.7Strongswan Strongswan 4.4.0Strongswan Strongswan 4.6.1Strongswan Strongswan 4.6.2Strongswan Strongswan 5.1.0Strongswan Strongswan 5.1.1Strongswan Strongswan 5.3.0Strongswan Strongswan 5.3.1Strongswan Strongswan 4.3.3Strongswan Strongswan 4.3.4Strongswan Strongswan 4.5.1Strongswan Strongswan 4.5.2Strongswan Strongswan 5.0.0Strongswan Strongswan 5.0.1Strongswan Strongswan 5.2.0Strongswan Strongswan 5.2.1
NA
CVE-2014-9221
strongSwan 4.5.x up to and including 5.2.x prior to 5.2.1 allows remote malicious users to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.
Strongswan Strongswan 5.1.2Strongswan Strongswan 4.5.3Strongswan Strongswan 4.5.2Strongswan Strongswan 5.0.1Strongswan Strongswan 5.1.0Strongswan Strongswan 4.5.1Strongswan Strongswan 5.2.0Strongswan Strongswan 5.1.3Strongswan Strongswan 4.6.4Strongswan Strongswan 4.6.2Strongswan Strongswan 5.1.1Strongswan Strongswan 5.0.3Strongswan Strongswan 5.0.4Strongswan Strongswan 4.6.1Strongswan Strongswan 5.0.2Strongswan Strongswan 4.6.0Strongswan Strongswan 4.6.3Strongswan Strongswan 5.0.0Strongswan Strongswan 4.5.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Canonical Ubuntu Linux 14.10
NA
CVE-2014-2338
IKEv2 in strongSwan 4.0.7 prior to 5.1.3 allows remote malicious users to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
Strongswan Strongswan 5.1.2Strongswan Strongswan 5.1.1Strongswan Strongswan 4.6.0Strongswan Strongswan 4.6.1Strongswan Strongswan 4.5.3Strongswan Strongswan 4.4.0Strongswan Strongswan 5.0.1Strongswan Strongswan 5.0.2Strongswan Strongswan 4.6.4Strongswan Strongswan 4.5.0Strongswan Strongswan 4.3.2Strongswan Strongswan 4.3.3Strongswan Strongswan 4.2.10Strongswan Strongswan 4.2.11Strongswan Strongswan 4.3.6Strongswan Strongswan 4.3.7Strongswan Strongswan 4.2.14Strongswan Strongswan 4.2.15Strongswan Strongswan 4.2.7Strongswan Strongswan 4.2.8Strongswan Strongswan 4.2.9Strongswan Strongswan 4.1.4
NA
CVE-2013-6075
The compare_dn function in utils/identification.c in strongSwan 4.3.3 up to and including 5.1.1 allows (1) remote malicious users to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitra...
Strongswan Strongswan 4.3.6Strongswan Strongswan 4.3.7Strongswan Strongswan 4.4.0Strongswan Strongswan 4.4.1Strongswan Strongswan 4.5.0Strongswan Strongswan 5.0.4Strongswan Strongswan 5.1.0Strongswan Strongswan 4.3.4Strongswan Strongswan 4.5.1Strongswan Strongswan 4.5.3Strongswan Strongswan 5.0.1Strongswan Strongswan 5.0.3Strongswan Strongswan 4.6.1Strongswan Strongswan 4.6.2Strongswan Strongswan 4.6.3Strongswan Strongswan 4.6.4Strongswan Strongswan 4.3.3Strongswan Strongswan 4.3.5Strongswan Strongswan 4.5.2Strongswan Strongswan 4.6.0Strongswan Strongswan 5.0.0Strongswan Strongswan 5.0.2
NA
CVE-2013-2944
strongSwan 4.3.5 up to and including 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote malicious users to authenticate as other users via an invalid signature.
Strongswan Strongswan 4.3.7Strongswan Strongswan 4.5.3Strongswan Strongswan 4.5.2Strongswan Strongswan 5.0.1Strongswan Strongswan 4.4.0Strongswan Strongswan 4.5.1Strongswan Strongswan 4.3.5Strongswan Strongswan 4.6.4Strongswan Strongswan 4.6.2Strongswan Strongswan 4.6.1Strongswan Strongswan 5.0.2Strongswan Strongswan 4.3.6Strongswan Strongswan 4.6.0Strongswan Strongswan 4.6.3Strongswan Strongswan 5.0.0Strongswan Strongswan 4.4.1Strongswan Strongswan 4.5.0
NA
CVE-2012-2388
The GMP Plugin in strongSwan 4.2.0 up to and including 4.6.3 allows remote malicious users to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."
Strongswan Strongswan 4.2.16Strongswan Strongswan 4.2.9Strongswan Strongswan 4.2.6Strongswan Strongswan 4.2.15Strongswan Strongswan 4.2.1Strongswan Strongswan 4.3.2Strongswan Strongswan 4.6.0Strongswan Strongswan 4.6.1Strongswan Strongswan 4.4.1Strongswan Strongswan 4.2.11Strongswan Strongswan 4.2.10Strongswan Strongswan 4.2.5Strongswan Strongswan 4.2.0Strongswan Strongswan 4.3.5Strongswan Strongswan 4.4.0Strongswan Strongswan 4.5.1Strongswan Strongswan 4.5.0Strongswan Strongswan 4.2.13Strongswan Strongswan 4.2.12Strongswan Strongswan 4.2.3Strongswan Strongswan 4.2.4Strongswan Strongswan 4.3.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook