CVE-2014-2338
Fixed in a distro release EPSS 2%
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
Products: strongswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | strongswan | 5.1.2-4 |
| Debian 13 | strongswan | 5.1.2-4 |
| Debian 14 | strongswan | 5.1.2-4 |
| Debian 6.0 | strongswan | 4.4.1-5.5 |
| Debian 7 | strongswan | 4.5.2-1.5+deb7u3 |
| Ubuntu 14.04 LTS | strongswan | 5.1.2-0ubuntu2 |
| openSUSE Tumbleweed | strongswan | 5.3.5-1.1 |