Lucene search
Ubuntu.comUB:CVE-2015-8023HistoryNov 16, 2015 - 12:00 a.m.
CVE-2015-8023
2015-11-1600:00:00
ubuntu.com
ubuntu.com
10
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
77.1%
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2
plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly
validate local state, which allows remote attackers to bypass
authentication via an empty Success message in response to an initial
Challenge message.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | strongswan | < 5.1.2-0ubuntu2.4 | UNKNOWN |
| ubuntu | 15.04 | noarch | strongswan | < 5.1.2-0ubuntu5.3 | UNKNOWN |
| ubuntu | 15.10 | noarch | strongswan | < 5.1.2-0ubuntu6.2 | UNKNOWN |
| ubuntu | 16.04 | noarch | strongswan | < 5.1.2-0ubuntu7 | UNKNOWN |
| ubuntu | 16.10 | noarch | strongswan | < 5.1.2-0ubuntu7 | UNKNOWN |
| ubuntu | 17.04 | noarch | strongswan | < 5.1.2-0ubuntu7 | UNKNOWN |
Related
nessus
nessus
Ubuntu 14.04 LTS : strongSwan vulnerability (USN-2811-1)
2015-11-17 00:00:00
SUSE SLED11 / SLES11 Security Update : strongswan (SUSE-SU-2015:2186-1)
2015-12-04 00:00:00
openSUSE Security Update : strongswan (openSUSE-2015-810)
2015-11-30 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-345-1)
2023-03-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:2183-1)
2021-04-19 00:00:00
Debian Security Advisory DSA 3398-1 (strongswan - security update)
2015-11-16 00:00:00
prion
prion
Authentication flaw
2015-11-18 16:59:00
cvelist
cvelist
CVE-2015-8023
2015-11-18 16:00:00
nvd
nvd
CVE-2015-8023
2015-11-18 16:59:07
suse
suse
Security update for strongswan (important)
2015-12-21 23:10:52
debian
debian
[SECURITY] [DSA 3398-1] strongswan security update
2015-11-16 13:14:07
[SECURITY] [DLA 345-1] strongswan security update
2015-11-19 12:46:30
cve
cve
CVE-2015-8023
2015-11-18 16:59:07
ibm
ibm
debiancve
debiancve
CVE-2015-8023
2015-11-18 16:59:07
freebsd
freebsd
strongswan -- authentication bypass vulnerability in the eap-mschapv2 plugin
2015-11-16 00:00:00
ubuntu
ubuntu
strongSwan vulnerability
2015-11-16 00:00:00
osv
osv
strongswan-5.3.5-1.1 on GA media
2024-06-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
77.1%
Related for UB:CVE-2015-8023