Back to search
CVE-2014-2338
Published: Apr 16, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
openSUSE-SU-2014:0697
vendor-advisory
x_refsource_SUSE
SUSE-SU-2014:0529
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2014:0700
vendor-advisory
x_refsource_SUSE
DSA-2903
vendor-advisory
x_refsource_DEBIAN
57823
third-party-advisory
x_refsource_SECUNIA
66815
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now