Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201412-26
HistoryDec 13, 2014 - 12:00 a.m.

strongSwan: Multiple Vulnerabilities

2014-12-1300:00:00
Gentoo Foundation
security.gentoo.org
14

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.044

Percentile

92.4%

JSON

Background

strongSwan is an IPSec implementation for Linux.

Description

A NULL pointer dereference and an error in the IKEv2 implementation have been found in strongSwan.

Impact

A remote attacker could create a Denial of Service condition or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All strongSwan users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-misc/strongswan-5.1.3"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-misc/strongswan<Β 5.1.3UNKNOWN

Related

nessus 10
openvas 13
ibm 1
securityvulns 3
freebsd 1
suse 1
prion 2
seebug 1
cve 2
ubuntucve 2
osv 3
debiancve 2
nvd 2
cvelist 2
debian 2
fedora 2
nessus
nessus
GLSA-201412-26 : strongSwan: Multiple Vulnerabilities
2014-12-15 00:00:00
openSUSE Security Update : strongswan (openSUSE-SU-2014:0697-1)
2014-06-13 00:00:00
Fedora 19 : strongswan-5.1.3-1.fc19 (2014-5238)
2014-04-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-26
2015-09-29 00:00:00
Debian Security Advisory DSA 2903-1 (strongswan - security update)
2014-04-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0529-1)
2021-06-09 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Strongswan affect Power Hardware Management Console (CVE-2014-9221,CVE-2014-2891,CVE-2014-2338,CVE-2013-5018)
2021-09-23 01:31:39
securityvulns
securityvulns
Openswan / Strongswan security vulnerabilities
2014-05-07 00:00:00
[SECURITY] [DSA 2903-1] strongswan security update
2014-05-04 00:00:00
[SECURITY] [DSA 2922-1] strongswan security update
2014-05-07 00:00:00
freebsd
freebsd
strongswan -- Remote Authentication Bypass
2014-03-12 00:00:00
suse
suse
Security update for strongswan (important)
2014-04-15 21:04:16
prion
prion
Authentication flaw
2014-04-16 18:37:00
Null pointer dereference
2014-05-07 10:55:00
seebug
seebug
strongSwan IKEv2 SAιͺŒθ―η»•θΏ‡ζΌζ΄ž
2014-04-18 00:00:00
cve
cve
CVE-2014-2338
2014-04-16 18:37:14
CVE-2014-2891
2014-05-07 10:55:06
ubuntucve
ubuntucve
CVE-2014-2338
2014-04-16 00:00:00
CVE-2014-2891
2014-04-25 00:00:00
osv
osv
strongswan - security update
2014-04-14 00:00:00
strongswan - security update
2014-05-05 00:00:00
strongswan-5.3.5-1.1 on GA media
2024-06-15 00:00:00
debiancve
debiancve
CVE-2014-2338
2014-04-16 18:37:14
CVE-2014-2891
2014-05-07 10:55:06
nvd
nvd
CVE-2014-2338
2014-04-16 18:37:14
CVE-2014-2891
2014-05-07 10:55:06
cvelist
cvelist
CVE-2014-2338
2014-04-16 18:00:00
CVE-2014-2891
2014-05-07 10:00:00
debian
debian
[SECURITY] [DSA 2903-1] strongswan security update
2014-04-14 15:01:29
[SECURITY] [DSA 2922-1] strongswan security update
2014-05-05 12:55:32
fedora
fedora
[SECURITY] Fedora 20 Update: strongswan-5.1.3-1.fc20
2014-04-24 07:35:30
[SECURITY] Fedora 19 Update: strongswan-5.1.3-1.fc19
2014-04-24 07:41:29

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.044

Percentile

92.4%

JSON
Related for GLSA-201412-26
nessus10openvas13ibm1securityvulns3freebsd1suse1prion2seebug1cve2ubuntucve2osv3debiancve2nvd2cvelist2debian2fedora2