CVE-2021-45079
Fixed in a distro release EPSS 3%
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.
Products: strongswan, debian_linux, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.13 | strongswan | 5.9.1-r2 |
| Alpine 3.14 | strongswan | 5.9.1-r3 |
| Alpine 3.15 | strongswan | 5.9.1-r4 |
| Alpine 3.16 | strongswan | 5.9.1-r4 |
| Alpine 3.17 | strongswan | 5.9.1-r4 |
| Alpine 3.18 | strongswan | 5.9.1-r4 |
| Alpine 3.19 | strongswan | 5.9.1-r4 |
| Alpine 3.20 | strongswan | 5.9.1-r4 |
| Alpine 3.21 | strongswan | 5.9.1-r4 |
| Alpine 3.22 | strongswan | 5.9.1-r4 |
| Alpine 3.23 | strongswan | 5.9.1-r4 |
| Alpine 3.24 | strongswan | 5.9.1-r4 |
| Debian 10 | strongswan | 5.7.2-1+deb10u2 |
| Debian 11 | strongswan | 5.9.1-1+deb11u2 |
| Debian 12 | strongswan | 5.9.5-1 |
| Debian 13 | strongswan | 5.9.5-1 |
| Debian 14 | strongswan | 5.9.5-1 |
| Debian 9 | strongswan | 5.5.1-4+deb9u6 |
| SUSE Enterprise Storage 6 | strongswan | 5.8.2-4.17.1 |
| SUSE Enterprise Storage 7 | strongswan | 5.8.2-11.24.1 |
| SUSE HPE Helion OpenStack 8 | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | strongswan | 4.4.0-6.36.12.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | strongswan | 4.4.0-6.36.12.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server 12 SP5 | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise Server 15-LTSS | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | strongswan | 5.1.3-26.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | strongswan | 5.8.2-4.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | strongswan | 5.8.2-11.24.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP3 | strongswan | 5.8.2-11.24.1 |
| SUSE Manager Proxy 4.1 | strongswan | 5.8.2-11.24.1 |
| SUSE Manager Retail Branch Server 4.1 | strongswan | 5.8.2-11.24.1 |
| SUSE Manager Server 4.1 | strongswan | 5.8.2-11.24.1 |
| SUSE OpenStack Cloud 8 | strongswan | 5.1.3-26.20.1 |
| SUSE OpenStack Cloud 9 | strongswan | 5.1.3-26.20.1 |
| SUSE OpenStack Cloud Crowbar 8 | strongswan | 5.1.3-26.20.1 |
| SUSE OpenStack Cloud Crowbar 9 | strongswan | 5.1.3-26.20.1 |
| Ubuntu 18.04 LTS | strongswan | 5.6.2-1ubuntu2.8 |
| Ubuntu 20.04 LTS | strongswan | 5.8.2-1ubuntu3.4 |
| Ubuntu 22.04 LTS | strongswan | 5.9.4-1ubuntu4 |
| Ubuntu Pro 14.04 LTS | strongswan | 5.1.2-0ubuntu2.11+esm2 |
| Ubuntu Pro 16.04 LTS | strongswan | 5.3.5-1ubuntu3.8+esm2 |
| Ubuntu Pro FIPS-updates 16.04 LTS | strongswan | 5.3.5-1ubuntu3.fips.3.8.3 |
| Ubuntu Pro FIPS-updates 18.04 LTS | strongswan | 5.6.2-1ubuntu2.fips.2.8.1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | strongswan | 5.8.2-1ubuntu3.fips.3.4.1 |
| Ubuntu Pro FIPS 16.04 LTS | strongswan | no fix |
| Ubuntu Pro FIPS 18.04 LTS | strongswan | no fix |
| Ubuntu Pro FIPS 20.04 LTS | strongswan | no fix |
| openSUSE Leap 15.3 | strongswan | 5.8.2-11.24.1 |
| openSUSE Tumbleweed | strongswan | 5.9.5-1.1 |