https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T04:42:42.510229+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-8023 CVE-2015-8023 2026-09-30T04:42:42.543810+00:00

The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.

 https://vulnerability.circl.lu/vuln/usn-2811-1 USN-2811-1 — strongswan vulnerability 2026-09-30T04:42:42.543910+00:00

Affected: Ubuntu:14.04:LTS: strongswan

It was discovered that the strongSwan eap-mschapv2 plugin incorrectly handled state. A remote attacker could use this issue to bypass authentication.