ISOMAN

CVE

CVE-2015-4171

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.

Severity
LOW
CVSS
2.6
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-updates/2015-06/msg00040.html
  2. http://www.debian.org/security/2015/dsa-3282
  3. http://www.openwall.com/lists/oss-security/2015/05/29/6
  4. http://www.openwall.com/lists/oss-security/2015/05/29/7
  5. http://www.openwall.com/lists/oss-security/2015/06/08/4
  6. http://www.securityfocus.com/bid/74933
  7. http://www.securitytracker.com/id/1032514
  8. http://www.ubuntu.com/usn/USN-2628-1
  9. https://bugzilla.suse.com/show_bug.cgi?id=933591
  10. https://play.google.com/store/apps/details?id=org.strongswan.android
  11. https://www.strongswan.org/blog/2015/06/08/strongswan-vulnerability-%2528cve-2015-4171%2529.html
  12. https://www.suse.com/security/cve/CVE-2015-4171.html
  13. http://lists.opensuse.org/opensuse-updates/2015-06/msg00040.html
  14. http://www.debian.org/security/2015/dsa-3282
  15. http://www.openwall.com/lists/oss-security/2015/05/29/6
  16. http://www.openwall.com/lists/oss-security/2015/05/29/7
  17. http://www.openwall.com/lists/oss-security/2015/06/08/4
  18. http://www.securityfocus.com/bid/74933
  19. http://www.securitytracker.com/id/1032514
  20. http://www.ubuntu.com/usn/USN-2628-1