Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-8023 (GCVE-0-2015-8023)
Vulnerability from cvelistv5 – Published: 2015-11-18 16:00 – Updated: 2024-08-06 08:06
VLAI?
EPSS
Summary
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T08:06:31.575Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "SUSE-SU-2015:2183",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html"
},
{
"name": "openSUSE-SU-2015:2103",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"name": "84947",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/84947"
},
{
"name": "DSA-3398",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"name": "USN-2811-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2811-1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-11-16T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-12-05T20:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "SUSE-SU-2015:2183",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html"
},
{
"name": "openSUSE-SU-2015:2103",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"name": "84947",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/84947"
},
{
"name": "DSA-3398",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"name": "USN-2811-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2811-1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-8023",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SU-2015:2183",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"name": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-(cve-2015-8023).html",
"refsource": "CONFIRM",
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-(cve-2015-8023).html"
},
{
"name": "openSUSE-SU-2015:2103",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"name": "84947",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/84947"
},
{
"name": "DSA-3398",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"name": "USN-2811-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2811-1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2015-8023",
"datePublished": "2015-11-18T16:00:00",
"dateReserved": "2015-10-29T00:00:00",
"dateUpdated": "2024-08-06T08:06:31.575Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F38D3B7E-8429-473F-BB31-FC3583EE5A5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E88A537F-F4D0-46B9-9E37-965233C2A355\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"155EB8F5-7C3C-4293-91EE-62DA561DA54A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E42B67A3-8650-426F-A8E8-DCA4180D787A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21CDA326-C5E4-4BAF-9DC6-4E5A57304C1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.2.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7AF119CF-2CC5-4313-8722-06BCE3DC6255\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"384C0CAE-8AC3-47AA-9F1C-9DE6779CA583\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"00BC4DA6-BFD1-43CF-B8B8-DACBF09E4721\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FEDBF811-7E48-4E99-AE05-FFC12AAF1CDF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83086A98-0F54-460E-929F-A32DCCC604A7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8421916C-B6D2-4771-8E59-7057ACC096E6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A76F8B29-E036-4895-8296-29FE49C34A34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"345E6CA4-A6E3-4A8B-9542-04D032956FCB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CA544693-EE26-47A9-9EA2-5CA2AE17E387\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"693623FC-189E-478E-8426-292A9002AABA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"278AB378-33D0-449D-8578-B537B4D28C5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D7B465A7-9C74-411B-B65A-892BED6FBD39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3D84EEB7-9900-4765-A1AD-B005618ACEDF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"89057C10-2C55-45CB-8497-40E27EAED297\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D8A9FCA-801F-4320-A3EA-F3EA952F47A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7350416E-359D-45F4-A3AC-1CF7E6EC7ED3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23A022A5-6DDA-4B4C-8354-935F9D99BC74\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73AED6DF-50C7-49DE-A9CA-A5AB519B4832\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3BDCDDFD-E4ED-436F-A8AD-B218CC5790D3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1650266B-7975-4ADB-8E7F-A2854ED27CCC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"944942A8-79D0-40AC-BE98-D552DCF2BB07\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"905ABDB8-6CC3-4F7F-8853-8EDDA5E5AB8F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"14E2A13E-427F-45A7-B898-64C10CD8962B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"40ED1E2A-B769-4B1D-83D1-300789E03C97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"339D620A-CD60-4078-81A1-5703B1CFBB3D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0973151D-E7F0-4F3D-B2AD-62486C27DFEE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A2A1F50-F88A-4601-9DAB-BD47BE0E7750\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBC48CDA-33DB-42E3-AEC7-431C62055E6E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3F0C952A-B468-4224-B871-D55B5E6D4164\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED1BE2B5-44E6-49C1-B030-58195ACC12CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8EEBF7AF-DC11-4F1A-BE21-236A39D94106\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"619B246C-CCB8-4EAC-A992-724A9E56E8E6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2FDA9786-AA47-405A-9E76-4D9B69151D1D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EB32E0A3-A72A-4940-A265-ED4896F6A60D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C944A53-DF8C-4A86-95D0-A1035571E2FC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C675D50-A320-487F-BD45-CD4C7F181130\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:strongswan:strongswan:5.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3BF45828-9EE6-49B0-A038-AC40B2506818\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.\"}, {\"lang\": \"es\", \"value\": \"La implementaci\\u00f3n del servidor del protocolo EAP-MSCHAPv2 en el plugin eap-mschapv2 en strongSwan 4.2.12 hasta la versi\\u00f3n 5.x en versiones anteriores a 5.3.4 no valida adecuadamente el estado local, lo que permite a atacantes remotos eludir la autenticaci\\u00f3n a trav\\u00e9s de un mensaje Success vac\\u00edo en respuesta a un mensaje Challenge inicial.\"}]",
"id": "CVE-2015-8023",
"lastModified": "2024-11-21T02:37:51.770",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:P/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2015-11-18T16:59:07.587",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2015/dsa-3398\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/84947\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-2811-1\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2015/dsa-3398\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/84947\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-2811-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}, {\"lang\": \"en\", \"value\": \"CWE-264\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2015-8023\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-11-18T16:59:07.587\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.\"},{\"lang\":\"es\",\"value\":\"La implementaci\u00f3n del servidor del protocolo EAP-MSCHAPv2 en el plugin eap-mschapv2 en strongSwan 4.2.12 hasta la versi\u00f3n 5.x en versiones anteriores a 5.3.4 no valida adecuadamente el estado local, lo que permite a atacantes remotos eludir la autenticaci\u00f3n a trav\u00e9s de un mensaje Success vac\u00edo en respuesta a un mensaje Challenge inicial.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"},{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F38D3B7E-8429-473F-BB31-FC3583EE5A5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E88A537F-F4D0-46B9-9E37-965233C2A355\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"155EB8F5-7C3C-4293-91EE-62DA561DA54A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E42B67A3-8650-426F-A8E8-DCA4180D787A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21CDA326-C5E4-4BAF-9DC6-4E5A57304C1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.2.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7AF119CF-2CC5-4313-8722-06BCE3DC6255\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"384C0CAE-8AC3-47AA-9F1C-9DE6779CA583\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00BC4DA6-BFD1-43CF-B8B8-DACBF09E4721\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEDBF811-7E48-4E99-AE05-FFC12AAF1CDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83086A98-0F54-460E-929F-A32DCCC604A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8421916C-B6D2-4771-8E59-7057ACC096E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A76F8B29-E036-4895-8296-29FE49C34A34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"345E6CA4-A6E3-4A8B-9542-04D032956FCB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA544693-EE26-47A9-9EA2-5CA2AE17E387\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"693623FC-189E-478E-8426-292A9002AABA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"278AB378-33D0-449D-8578-B537B4D28C5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7B465A7-9C74-411B-B65A-892BED6FBD39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D84EEB7-9900-4765-A1AD-B005618ACEDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89057C10-2C55-45CB-8497-40E27EAED297\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D8A9FCA-801F-4320-A3EA-F3EA952F47A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7350416E-359D-45F4-A3AC-1CF7E6EC7ED3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23A022A5-6DDA-4B4C-8354-935F9D99BC74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73AED6DF-50C7-49DE-A9CA-A5AB519B4832\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BDCDDFD-E4ED-436F-A8AD-B218CC5790D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1650266B-7975-4ADB-8E7F-A2854ED27CCC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"944942A8-79D0-40AC-BE98-D552DCF2BB07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"905ABDB8-6CC3-4F7F-8853-8EDDA5E5AB8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14E2A13E-427F-45A7-B898-64C10CD8962B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40ED1E2A-B769-4B1D-83D1-300789E03C97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"339D620A-CD60-4078-81A1-5703B1CFBB3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0973151D-E7F0-4F3D-B2AD-62486C27DFEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A2A1F50-F88A-4601-9DAB-BD47BE0E7750\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBC48CDA-33DB-42E3-AEC7-431C62055E6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F0C952A-B468-4224-B871-D55B5E6D4164\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED1BE2B5-44E6-49C1-B030-58195ACC12CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EEBF7AF-DC11-4F1A-BE21-236A39D94106\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"619B246C-CCB8-4EAC-A992-724A9E56E8E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FDA9786-AA47-405A-9E76-4D9B69151D1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB32E0A3-A72A-4940-A265-ED4896F6A60D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C944A53-DF8C-4A86-95D0-A1035571E2FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C675D50-A320-487F-BD45-CD4C7F181130\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BF45828-9EE6-49B0-A038-AC40B2506818\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3398\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/84947\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2811-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3398\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/84947\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2811-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
FKIE_CVE-2015-8023
Vulnerability from fkie_nvd - Published: 2015-11-18 16:59 - Updated: 2025-04-12 10:46
Severity ?
Summary
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*",
"matchCriteriaId": "38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*",
"matchCriteriaId": "155EB8F5-7C3C-4293-91EE-62DA561DA54A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*",
"matchCriteriaId": "E42B67A3-8650-426F-A8E8-DCA4180D787A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*",
"matchCriteriaId": "21CDA326-C5E4-4BAF-9DC6-4E5A57304C1F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.2.16:*:*:*:*:*:*:*",
"matchCriteriaId": "7AF119CF-2CC5-4313-8722-06BCE3DC6255",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "384C0CAE-8AC3-47AA-9F1C-9DE6779CA583",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "00BC4DA6-BFD1-43CF-B8B8-DACBF09E4721",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FEDBF811-7E48-4E99-AE05-FFC12AAF1CDF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "83086A98-0F54-460E-929F-A32DCCC604A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "8421916C-B6D2-4771-8E59-7057ACC096E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "A76F8B29-E036-4895-8296-29FE49C34A34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "345E6CA4-A6E3-4A8B-9542-04D032956FCB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "CA544693-EE26-47A9-9EA2-5CA2AE17E387",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "693623FC-189E-478E-8426-292A9002AABA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "278AB378-33D0-449D-8578-B537B4D28C5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D7B465A7-9C74-411B-B65A-892BED6FBD39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3D84EEB7-9900-4765-A1AD-B005618ACEDF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "89057C10-2C55-45CB-8497-40E27EAED297",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "6D8A9FCA-801F-4320-A3EA-F3EA952F47A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7350416E-359D-45F4-A3AC-1CF7E6EC7ED3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "23A022A5-6DDA-4B4C-8354-935F9D99BC74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "73AED6DF-50C7-49DE-A9CA-A5AB519B4832",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3BDCDDFD-E4ED-436F-A8AD-B218CC5790D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "1650266B-7975-4ADB-8E7F-A2854ED27CCC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "944942A8-79D0-40AC-BE98-D552DCF2BB07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "905ABDB8-6CC3-4F7F-8853-8EDDA5E5AB8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "14E2A13E-427F-45A7-B898-64C10CD8962B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "40ED1E2A-B769-4B1D-83D1-300789E03C97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "339D620A-CD60-4078-81A1-5703B1CFBB3D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0973151D-E7F0-4F3D-B2AD-62486C27DFEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6A2A1F50-F88A-4601-9DAB-BD47BE0E7750",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "CBC48CDA-33DB-42E3-AEC7-431C62055E6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0C952A-B468-4224-B871-D55B5E6D4164",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "ED1BE2B5-44E6-49C1-B030-58195ACC12CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8EEBF7AF-DC11-4F1A-BE21-236A39D94106",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "619B246C-CCB8-4EAC-A992-724A9E56E8E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2FDA9786-AA47-405A-9E76-4D9B69151D1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EB32E0A3-A72A-4940-A265-ED4896F6A60D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5C944A53-DF8C-4A86-95D0-A1035571E2FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3C675D50-A320-487F-BD45-CD4C7F181130",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:strongswan:strongswan:5.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3BF45828-9EE6-49B0-A038-AC40B2506818",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message."
},
{
"lang": "es",
"value": "La implementaci\u00f3n del servidor del protocolo EAP-MSCHAPv2 en el plugin eap-mschapv2 en strongSwan 4.2.12 hasta la versi\u00f3n 5.x en versiones anteriores a 5.3.4 no valida adecuadamente el estado local, lo que permite a atacantes remotos eludir la autenticaci\u00f3n a trav\u00e9s de un mensaje Success vac\u00edo en respuesta a un mensaje Challenge inicial."
}
],
"id": "CVE-2015-8023",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-11-18T16:59:07.587",
"references": [
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/84947"
},
{
"source": "cve@mitre.org",
"url": "http://www.ubuntu.com/usn/USN-2811-1"
},
{
"source": "cve@mitre.org",
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/84947"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ubuntu.com/usn/USN-2811-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
SUSE-SU-2015:2186-1
Vulnerability from csaf_suse - Published: 2015-12-03 13:45 - Updated: 2015-12-03 13:45Summary
Security update for strongswan
Notes
Title of the patch
Security update for strongswan
Description of the patch
The strongswan package was updated to fix the following security issue:
- CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817).
Patchnames
sledsp3-strongswan-12246,sledsp4-strongswan-12246,slessp3-strongswan-12246,slessp4-strongswan-12246
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for strongswan",
"title": "Title of the patch"
},
{
"category": "description",
"text": "The strongswan package was updated to fix the following security issue:\n\n- CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sledsp3-strongswan-12246,sledsp4-strongswan-12246,slessp3-strongswan-12246,slessp4-strongswan-12246",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_2186-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:2186-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20152186-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:2186-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-December/001715.html"
},
{
"category": "self",
"summary": "SUSE Bug 953817",
"url": "https://bugzilla.suse.com/953817"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8023 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8023/"
}
],
"title": "Security update for strongswan",
"tracking": {
"current_release_date": "2015-12-03T13:45:53Z",
"generator": {
"date": "2015-12-03T13:45:53Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:2186-1",
"initial_release_date": "2015-12-03T13:45:53Z",
"revision_history": [
{
"date": "2015-12-03T13:45:53Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "strongswan-4.4.0-6.32.1.i586",
"product": {
"name": "strongswan-4.4.0-6.32.1.i586",
"product_id": "strongswan-4.4.0-6.32.1.i586"
}
},
{
"category": "product_version",
"name": "strongswan-doc-4.4.0-6.32.1.i586",
"product": {
"name": "strongswan-doc-4.4.0-6.32.1.i586",
"product_id": "strongswan-doc-4.4.0-6.32.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-4.4.0-6.32.1.ia64",
"product": {
"name": "strongswan-4.4.0-6.32.1.ia64",
"product_id": "strongswan-4.4.0-6.32.1.ia64"
}
},
{
"category": "product_version",
"name": "strongswan-doc-4.4.0-6.32.1.ia64",
"product": {
"name": "strongswan-doc-4.4.0-6.32.1.ia64",
"product_id": "strongswan-doc-4.4.0-6.32.1.ia64"
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-4.4.0-6.32.1.ppc64",
"product": {
"name": "strongswan-4.4.0-6.32.1.ppc64",
"product_id": "strongswan-4.4.0-6.32.1.ppc64"
}
},
{
"category": "product_version",
"name": "strongswan-doc-4.4.0-6.32.1.ppc64",
"product": {
"name": "strongswan-doc-4.4.0-6.32.1.ppc64",
"product_id": "strongswan-doc-4.4.0-6.32.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-4.4.0-6.32.1.s390x",
"product": {
"name": "strongswan-4.4.0-6.32.1.s390x",
"product_id": "strongswan-4.4.0-6.32.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-doc-4.4.0-6.32.1.s390x",
"product": {
"name": "strongswan-doc-4.4.0-6.32.1.s390x",
"product_id": "strongswan-doc-4.4.0-6.32.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-4.4.0-6.32.1.x86_64",
"product": {
"name": "strongswan-4.4.0-6.32.1.x86_64",
"product_id": "strongswan-4.4.0-6.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-doc-4.4.0-6.32.1.x86_64",
"product": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64",
"product_id": "strongswan-doc-4.4.0-6.32.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sled:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sled:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:strongswan-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:strongswan-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:strongswan-doc-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.i586"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.ia64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.ppc64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.s390x"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-4.4.0-6.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64"
},
"product_reference": "strongswan-doc-4.4.0-6.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-8023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8023"
}
],
"notes": [
{
"category": "general",
"text": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8023",
"url": "https://www.suse.com/security/cve/CVE-2015-8023"
},
{
"category": "external",
"summary": "SUSE Bug 953817 for CVE-2015-8023",
"url": "https://bugzilla.suse.com/953817"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:strongswan-doc-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-4.4.0-6.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:strongswan-doc-4.4.0-6.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-12-03T13:45:53Z",
"details": "important"
}
],
"title": "CVE-2015-8023"
}
]
}
SUSE-SU-2015:2183-2
Vulnerability from csaf_suse - Published: 2015-12-21 19:00 - Updated: 2015-12-21 19:00Summary
Security update for strongswan
Notes
Title of the patch
Security update for strongswan
Description of the patch
The strongswan package was updated to fix the following security issue:
- CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817).
Patchnames
SUSE-SLE-DESKTOP-12-SP1-2015-934,SUSE-SLE-SERVER-12-SP1-2015-934
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for strongswan",
"title": "Title of the patch"
},
{
"category": "description",
"text": "The strongswan package was updated to fix the following security issue:\n\n- CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2015-934,SUSE-SLE-SERVER-12-SP1-2015-934",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_2183-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:2183-2",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20152183-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:2183-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-December/001752.html"
},
{
"category": "self",
"summary": "SUSE Bug 953817",
"url": "https://bugzilla.suse.com/953817"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8023 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8023/"
}
],
"title": "Security update for strongswan",
"tracking": {
"current_release_date": "2015-12-21T19:00:10Z",
"generator": {
"date": "2015-12-21T19:00:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:2183-2",
"initial_release_date": "2015-12-21T19:00:10Z",
"revision_history": [
{
"date": "2015-12-21T19:00:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "strongswan-doc-5.1.3-22.1.noarch",
"product": {
"name": "strongswan-doc-5.1.3-22.1.noarch",
"product_id": "strongswan-doc-5.1.3-22.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-5.1.3-22.1.ppc64le",
"product_id": "strongswan-5.1.3-22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-hmac-5.1.3-22.1.ppc64le",
"product_id": "strongswan-hmac-5.1.3-22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"product_id": "strongswan-ipsec-5.1.3-22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-libs0-5.1.3-22.1.ppc64le",
"product_id": "strongswan-libs0-5.1.3-22.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-5.1.3-22.1.s390x",
"product_id": "strongswan-5.1.3-22.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-hmac-5.1.3-22.1.s390x",
"product_id": "strongswan-hmac-5.1.3-22.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-ipsec-5.1.3-22.1.s390x",
"product_id": "strongswan-ipsec-5.1.3-22.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-libs0-5.1.3-22.1.s390x",
"product_id": "strongswan-libs0-5.1.3-22.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-5.1.3-22.1.x86_64",
"product_id": "strongswan-5.1.3-22.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64",
"product_id": "strongswan-ipsec-5.1.3-22.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64",
"product_id": "strongswan-libs0-5.1.3-22.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-hmac-5.1.3-22.1.x86_64",
"product_id": "strongswan-hmac-5.1.3-22.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:strongswan-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.1.3-22.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:strongswan-doc-5.1.3-22.1.noarch"
},
"product_reference": "strongswan-doc-5.1.3-22.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.1.3-22.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-doc-5.1.3-22.1.noarch"
},
"product_reference": "strongswan-doc-5.1.3-22.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.1.3-22.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-22.1.noarch"
},
"product_reference": "strongswan-doc-5.1.3-22.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-8023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8023"
}
],
"notes": [
{
"category": "general",
"text": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8023",
"url": "https://www.suse.com/security/cve/CVE-2015-8023"
},
{
"category": "external",
"summary": "SUSE Bug 953817 for CVE-2015-8023",
"url": "https://bugzilla.suse.com/953817"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-22.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-12-21T19:00:10Z",
"details": "important"
}
],
"title": "CVE-2015-8023"
}
]
}
SUSE-SU-2015:2183-1
Vulnerability from csaf_suse - Published: 2015-12-21 19:00 - Updated: 2015-12-21 19:00Summary
Security update for strongswan
Notes
Title of the patch
Security update for strongswan
Description of the patch
The strongswan package was updated to fix the following security issue:
- CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817).
Patchnames
SUSE-SLE-DESKTOP-12-2015-934,SUSE-SLE-SERVER-12-2015-934
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for strongswan",
"title": "Title of the patch"
},
{
"category": "description",
"text": "The strongswan package was updated to fix the following security issue:\n\n- CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2015-934,SUSE-SLE-SERVER-12-2015-934",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_2183-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:2183-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20152183-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:2183-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-December/001713.html"
},
{
"category": "self",
"summary": "SUSE Bug 953817",
"url": "https://bugzilla.suse.com/953817"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8023 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8023/"
}
],
"title": "Security update for strongswan",
"tracking": {
"current_release_date": "2015-12-21T19:00:13Z",
"generator": {
"date": "2015-12-21T19:00:13Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:2183-1",
"initial_release_date": "2015-12-21T19:00:13Z",
"revision_history": [
{
"date": "2015-12-21T19:00:13Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "strongswan-doc-5.1.3-22.1.noarch",
"product": {
"name": "strongswan-doc-5.1.3-22.1.noarch",
"product_id": "strongswan-doc-5.1.3-22.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-5.1.3-22.1.ppc64le",
"product_id": "strongswan-5.1.3-22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-hmac-5.1.3-22.1.ppc64le",
"product_id": "strongswan-hmac-5.1.3-22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"product_id": "strongswan-ipsec-5.1.3-22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.1.3-22.1.ppc64le",
"product": {
"name": "strongswan-libs0-5.1.3-22.1.ppc64le",
"product_id": "strongswan-libs0-5.1.3-22.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-5.1.3-22.1.s390x",
"product_id": "strongswan-5.1.3-22.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-hmac-5.1.3-22.1.s390x",
"product_id": "strongswan-hmac-5.1.3-22.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-ipsec-5.1.3-22.1.s390x",
"product_id": "strongswan-ipsec-5.1.3-22.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.1.3-22.1.s390x",
"product": {
"name": "strongswan-libs0-5.1.3-22.1.s390x",
"product_id": "strongswan-libs0-5.1.3-22.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-5.1.3-22.1.x86_64",
"product_id": "strongswan-5.1.3-22.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64",
"product_id": "strongswan-ipsec-5.1.3-22.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64",
"product_id": "strongswan-libs0-5.1.3-22.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.1.3-22.1.x86_64",
"product": {
"name": "strongswan-hmac-5.1.3-22.1.x86_64",
"product_id": "strongswan-hmac-5.1.3-22.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:strongswan-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.1.3-22.1.noarch as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:strongswan-doc-5.1.3-22.1.noarch"
},
"product_reference": "strongswan-doc-5.1.3-22.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:strongswan-ipsec-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:strongswan-libs0-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.1.3-22.1.noarch as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-doc-5.1.3-22.1.noarch"
},
"product_reference": "strongswan-doc-5.1.3-22.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.1.3-22.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-doc-5.1.3-22.1.noarch"
},
"product_reference": "strongswan-doc-5.1.3-22.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-hmac-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-ipsec-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.ppc64le"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.s390x"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.1.3-22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.x86_64"
},
"product_reference": "strongswan-libs0-5.1.3-22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-8023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8023"
}
],
"notes": [
{
"category": "general",
"text": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Desktop 12:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8023",
"url": "https://www.suse.com/security/cve/CVE-2015-8023"
},
{
"category": "external",
"summary": "SUSE Bug 953817 for CVE-2015-8023",
"url": "https://bugzilla.suse.com/953817"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Desktop 12:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Desktop 12:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-doc-5.1.3-22.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-22.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-12-21T19:00:13Z",
"details": "important"
}
],
"title": "CVE-2015-8023"
}
]
}
CNVD-2015-07709
Vulnerability from cnvd - Published: 2015-11-23
VLAI Severity ?
Title
strongSwan安全机制绕过漏洞
Description
strongSwan是一套Linux平台使用的开源的基于IPsec的VPN解决方案。
strongSwan的eap-mschapv2插件中的EAP-MSCHAPv2协议的服务器实现过程中未能正确验证本地状态，允许远程攻击者可发送空的Success消息做为初始Challenge消息的响应绕过身份验证。
Severity
中
Patch Name
strongSwan安全机制绕过漏洞的补丁
Patch Description
strongSwan是一套Linux平台使用的开源的基于IPsec的VPN解决方案。
strongSwan的eap-mschapv2插件中的EAP-MSCHAPv2协议的服务器实现过程中未能正确验证本地状态，允许远程攻击者可发送空的Success消息做为初始Challenge消息的响应绕过身份验证。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞： http://www.ubuntu.com/usn/USN-2811-1
Reference
http://www.ubuntu.com/usn/USN-2811-1
Impacted products
| Name | Strongswan Strongswan 4.2.12-5.x(<5.3.4) |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2015-8023"
}
},
"description": "strongSwan\u662f\u4e00\u5957Linux\u5e73\u53f0\u4f7f\u7528\u7684\u5f00\u6e90\u7684\u57fa\u4e8eIPsec\u7684VPN\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nstrongSwan\u7684eap-mschapv2\u63d2\u4ef6\u4e2d\u7684EAP-MSCHAPv2\u534f\u8bae\u7684\u670d\u52a1\u5668\u5b9e\u73b0\u8fc7\u7a0b\u4e2d\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u672c\u5730\u72b6\u6001\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u53d1\u9001\u7a7a\u7684Success\u6d88\u606f\u505a\u4e3a\u521d\u59cbChallenge\u6d88\u606f\u7684\u54cd\u5e94\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u3002",
"discovererName": "strongSwan",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://www.ubuntu.com/usn/USN-2811-1",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2015-07709",
"openTime": "2015-11-23",
"patchDescription": "strongSwan\u662f\u4e00\u5957Linux\u5e73\u53f0\u4f7f\u7528\u7684\u5f00\u6e90\u7684\u57fa\u4e8eIPsec\u7684VPN\u89e3\u51b3\u65b9\u6848\u3002 \r\n\r\nstrongSwan\u7684eap-mschapv2\u63d2\u4ef6\u4e2d\u7684EAP-MSCHAPv2\u534f\u8bae\u7684\u670d\u52a1\u5668\u5b9e\u73b0\u8fc7\u7a0b\u4e2d\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u672c\u5730\u72b6\u6001\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u53d1\u9001\u7a7a\u7684Success\u6d88\u606f\u505a\u4e3a\u521d\u59cbChallenge\u6d88\u606f\u7684\u54cd\u5e94\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "strongSwan\u5b89\u5168\u673a\u5236\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "Strongswan Strongswan 4.2.12-5.x(\u003c5.3.4)"
},
"referenceLink": "http://www.ubuntu.com/usn/USN-2811-1",
"serverity": "\u4e2d",
"submitTime": "2015-11-19",
"title": "strongSwan\u5b89\u5168\u673a\u5236\u7ed5\u8fc7\u6f0f\u6d1e"
}
GHSA-4QM7-RM85-WR68
Vulnerability from github – Published: 2022-05-14 03:07 – Updated: 2025-04-12 12:54
VLAI?
Details
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
{
"affected": [],
"aliases": [
"CVE-2015-8023"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2015-11-18T16:59:00Z",
"severity": "MODERATE"
},
"details": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.",
"id": "GHSA-4qm7-rm85-wr68",
"modified": "2025-04-12T12:54:09Z",
"published": "2022-05-14T03:07:25Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8023"
},
{
"type": "WEB",
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html"
},
{
"type": "WEB",
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-(cve-2015-8023).html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/84947"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2811-1"
}
],
"schema_version": "1.4.0",
"severity": []
}
OPENSUSE-SU-2024:10579-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
strongswan-5.3.5-1.1 on GA media
Notes
Title of the patch
strongswan-5.3.5-1.1 on GA media
Description of the patch
These are all security issues fixed in the strongswan-5.3.5-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10579
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "strongswan-5.3.5-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the strongswan-5.3.5-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10579",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10579-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2009-0790 page",
"url": "https://www.suse.com/security/cve/CVE-2009-0790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2388 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2944 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-5018 page",
"url": "https://www.suse.com/security/cve/CVE-2013-5018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6075 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6076 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2338 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9221 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3991 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4171 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8023 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8023/"
}
],
"title": "strongswan-5.3.5-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10579-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-5.3.5-1.1.aarch64",
"product_id": "strongswan-5.3.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "strongswan-doc-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-doc-5.3.5-1.1.aarch64",
"product_id": "strongswan-doc-5.3.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-hmac-5.3.5-1.1.aarch64",
"product_id": "strongswan-hmac-5.3.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-ipsec-5.3.5-1.1.aarch64",
"product_id": "strongswan-ipsec-5.3.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-libs0-5.3.5-1.1.aarch64",
"product_id": "strongswan-libs0-5.3.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "strongswan-mysql-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-mysql-5.3.5-1.1.aarch64",
"product_id": "strongswan-mysql-5.3.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "strongswan-nm-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-nm-5.3.5-1.1.aarch64",
"product_id": "strongswan-nm-5.3.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "strongswan-sqlite-5.3.5-1.1.aarch64",
"product": {
"name": "strongswan-sqlite-5.3.5-1.1.aarch64",
"product_id": "strongswan-sqlite-5.3.5-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-5.3.5-1.1.ppc64le",
"product_id": "strongswan-5.3.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-doc-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-doc-5.3.5-1.1.ppc64le",
"product_id": "strongswan-doc-5.3.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-hmac-5.3.5-1.1.ppc64le",
"product_id": "strongswan-hmac-5.3.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-ipsec-5.3.5-1.1.ppc64le",
"product_id": "strongswan-ipsec-5.3.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-libs0-5.3.5-1.1.ppc64le",
"product_id": "strongswan-libs0-5.3.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-mysql-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-mysql-5.3.5-1.1.ppc64le",
"product_id": "strongswan-mysql-5.3.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-nm-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-nm-5.3.5-1.1.ppc64le",
"product_id": "strongswan-nm-5.3.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "strongswan-sqlite-5.3.5-1.1.ppc64le",
"product": {
"name": "strongswan-sqlite-5.3.5-1.1.ppc64le",
"product_id": "strongswan-sqlite-5.3.5-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-5.3.5-1.1.s390x",
"product_id": "strongswan-5.3.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-doc-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-doc-5.3.5-1.1.s390x",
"product_id": "strongswan-doc-5.3.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-hmac-5.3.5-1.1.s390x",
"product_id": "strongswan-hmac-5.3.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-ipsec-5.3.5-1.1.s390x",
"product_id": "strongswan-ipsec-5.3.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-libs0-5.3.5-1.1.s390x",
"product_id": "strongswan-libs0-5.3.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-mysql-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-mysql-5.3.5-1.1.s390x",
"product_id": "strongswan-mysql-5.3.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-nm-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-nm-5.3.5-1.1.s390x",
"product_id": "strongswan-nm-5.3.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "strongswan-sqlite-5.3.5-1.1.s390x",
"product": {
"name": "strongswan-sqlite-5.3.5-1.1.s390x",
"product_id": "strongswan-sqlite-5.3.5-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "strongswan-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-5.3.5-1.1.x86_64",
"product_id": "strongswan-5.3.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-doc-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-doc-5.3.5-1.1.x86_64",
"product_id": "strongswan-doc-5.3.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-hmac-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-hmac-5.3.5-1.1.x86_64",
"product_id": "strongswan-hmac-5.3.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-ipsec-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-ipsec-5.3.5-1.1.x86_64",
"product_id": "strongswan-ipsec-5.3.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-libs0-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-libs0-5.3.5-1.1.x86_64",
"product_id": "strongswan-libs0-5.3.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-mysql-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-mysql-5.3.5-1.1.x86_64",
"product_id": "strongswan-mysql-5.3.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-nm-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-nm-5.3.5-1.1.x86_64",
"product_id": "strongswan-nm-5.3.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "strongswan-sqlite-5.3.5-1.1.x86_64",
"product": {
"name": "strongswan-sqlite-5.3.5-1.1.x86_64",
"product_id": "strongswan-sqlite-5.3.5-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-doc-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-doc-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-doc-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-doc-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-doc-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-hmac-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-hmac-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-hmac-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-hmac-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-hmac-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-ipsec-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-ipsec-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-ipsec-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-ipsec-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-ipsec-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-libs0-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-libs0-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-libs0-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-libs0-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-libs0-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-mysql-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-mysql-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-mysql-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-mysql-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-mysql-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-mysql-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-mysql-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-mysql-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-nm-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-nm-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-nm-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-nm-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-nm-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-nm-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-nm-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-nm-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-sqlite-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64"
},
"product_reference": "strongswan-sqlite-5.3.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-sqlite-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le"
},
"product_reference": "strongswan-sqlite-5.3.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-sqlite-5.3.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x"
},
"product_reference": "strongswan-sqlite-5.3.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "strongswan-sqlite-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
},
"product_reference": "strongswan-sqlite-5.3.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2009-0790"
}
],
"notes": [
{
"category": "general",
"text": "The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2009-0790",
"url": "https://www.suse.com/security/cve/CVE-2009-0790"
},
{
"category": "external",
"summary": "SUSE Bug 487762 for CVE-2009-0790",
"url": "https://bugzilla.suse.com/487762"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2009-0790"
},
{
"cve": "CVE-2012-2388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2388"
}
],
"notes": [
{
"category": "general",
"text": "The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka \"RSA signature verification vulnerability.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2388",
"url": "https://www.suse.com/security/cve/CVE-2012-2388"
},
{
"category": "external",
"summary": "SUSE Bug 1107874 for CVE-2012-2388",
"url": "https://bugzilla.suse.com/1107874"
},
{
"category": "external",
"summary": "SUSE Bug 761325 for CVE-2012-2388",
"url": "https://bugzilla.suse.com/761325"
},
{
"category": "external",
"summary": "SUSE Bug 815236 for CVE-2012-2388",
"url": "https://bugzilla.suse.com/815236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2388"
},
{
"cve": "CVE-2013-2944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2944"
}
],
"notes": [
{
"category": "general",
"text": "strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2944",
"url": "https://www.suse.com/security/cve/CVE-2013-2944"
},
{
"category": "external",
"summary": "SUSE Bug 815236 for CVE-2013-2944",
"url": "https://bugzilla.suse.com/815236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2944"
},
{
"cve": "CVE-2013-5018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-5018"
}
],
"notes": [
{
"category": "general",
"text": "The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-5018",
"url": "https://www.suse.com/security/cve/CVE-2013-5018"
},
{
"category": "external",
"summary": "SUSE Bug 833278 for CVE-2013-5018",
"url": "https://bugzilla.suse.com/833278"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-5018"
},
{
"cve": "CVE-2013-6075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6075"
}
],
"notes": [
{
"category": "general",
"text": "The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6075",
"url": "https://www.suse.com/security/cve/CVE-2013-6075"
},
{
"category": "external",
"summary": "SUSE Bug 847506 for CVE-2013-6075",
"url": "https://bugzilla.suse.com/847506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6075"
},
{
"cve": "CVE-2013-6076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6076"
}
],
"notes": [
{
"category": "general",
"text": "strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6076",
"url": "https://www.suse.com/security/cve/CVE-2013-6076"
},
{
"category": "external",
"summary": "SUSE Bug 847509 for CVE-2013-6076",
"url": "https://bugzilla.suse.com/847509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6076"
},
{
"cve": "CVE-2014-2338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2338"
}
],
"notes": [
{
"category": "general",
"text": "IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2338",
"url": "https://www.suse.com/security/cve/CVE-2014-2338"
},
{
"category": "external",
"summary": "SUSE Bug 870572 for CVE-2014-2338",
"url": "https://bugzilla.suse.com/870572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2338"
},
{
"cve": "CVE-2014-9221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9221"
}
],
"notes": [
{
"category": "general",
"text": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9221",
"url": "https://www.suse.com/security/cve/CVE-2014-9221"
},
{
"category": "external",
"summary": "SUSE Bug 910491 for CVE-2014-9221",
"url": "https://bugzilla.suse.com/910491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-9221"
},
{
"cve": "CVE-2015-3991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3991"
}
],
"notes": [
{
"category": "general",
"text": "strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3991",
"url": "https://www.suse.com/security/cve/CVE-2015-3991"
},
{
"category": "external",
"summary": "SUSE Bug 931272 for CVE-2015-3991",
"url": "https://bugzilla.suse.com/931272"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-3991"
},
{
"cve": "CVE-2015-4171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4171"
}
],
"notes": [
{
"category": "general",
"text": "strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4171",
"url": "https://www.suse.com/security/cve/CVE-2015-4171"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4171",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 933591 for CVE-2015-4171",
"url": "https://bugzilla.suse.com/933591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-4171"
},
{
"cve": "CVE-2015-8023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8023"
}
],
"notes": [
{
"category": "general",
"text": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8023",
"url": "https://www.suse.com/security/cve/CVE-2015-8023"
},
{
"category": "external",
"summary": "SUSE Bug 953817 for CVE-2015-8023",
"url": "https://bugzilla.suse.com/953817"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x",
"openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-8023"
}
]
}
GSD-2015-8023
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2015-8023",
"description": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.",
"id": "GSD-2015-8023",
"references": [
"https://www.suse.com/security/cve/CVE-2015-8023.html",
"https://www.debian.org/security/2015/dsa-3398",
"https://ubuntu.com/security/CVE-2015-8023"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-8023"
],
"details": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.",
"id": "GSD-2015-8023",
"modified": "2023-12-13T01:20:02.906355Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-8023",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SU-2015:2183",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"name": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-(cve-2015-8023).html",
"refsource": "CONFIRM",
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-(cve-2015-8023).html"
},
{
"name": "openSUSE-SU-2015:2103",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"name": "84947",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/84947"
},
{
"name": "DSA-3398",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"name": "USN-2811-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2811-1"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.2.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-8023"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
},
{
"lang": "en",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "DSA-3398",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2015/dsa-3398"
},
{
"name": "USN-2811-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/USN-2811-1"
},
{
"name": "84947",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/84947"
},
{
"name": "openSUSE-SU-2015:2103",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html"
},
{
"name": "SUSE-SU-2015:2183",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html"
},
{
"name": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-(cve-2015-8023).html",
"refsource": "CONFIRM",
"tags": [],
"url": "https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-(cve-2015-8023).html"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2018-08-13T21:47Z",
"publishedDate": "2015-11-18T16:59Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…