Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2014-9221 (GCVE-0-2014-9221)
Vulnerability from cvelistv5
- n/a
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T13:40:24.879Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "62095", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/62095" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html" }, { "name": "USN-2450-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "http://www.ubuntu.com/usn/USN-2450-1" }, { "name": "DSA-3118", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2015/dsa-3118" }, { "name": "62071", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/62071" }, { "name": "FEDORA-2015-3043", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "name": "62663", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/62663" }, { "name": "openSUSE-SU-2015:0114", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "name": "62083", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/62083" }, { "name": "71894", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/71894" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2015-01-05T00:00:00", "descriptions": [ { "lang": "en", "value": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2016-12-30T16:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "name": "62095", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/62095" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html" }, { "name": "USN-2450-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "http://www.ubuntu.com/usn/USN-2450-1" }, { "name": "DSA-3118", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2015/dsa-3118" }, { "name": "62071", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/62071" }, { "name": "FEDORA-2015-3043", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "name": "62663", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/62663" }, { "name": "openSUSE-SU-2015:0114", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "name": "62083", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/62083" }, { "name": "71894", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/71894" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-9221", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "62095", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62095" }, { "name": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-(cve-2014-9221).html", "refsource": "CONFIRM", "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-(cve-2014-9221).html" }, { "name": "USN-2450-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-2450-1" }, { "name": "DSA-3118", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2015/dsa-3118" }, { "name": "62071", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62071" }, { "name": "FEDORA-2015-3043", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "name": "62663", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62663" }, { "name": "openSUSE-SU-2015:0114", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "name": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html", "refsource": "CONFIRM", "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "name": "62083", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62083" }, { "name": "71894", "refsource": "BID", "url": "http://www.securityfocus.com/bid/71894" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-9221", "datePublished": "2015-01-07T19:00:00", "dateReserved": "2014-12-02T00:00:00", "dateUpdated": "2024-08-06T13:40:24.879Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2014-9221\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-01-07T19:59:01.137\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.\"},{\"lang\":\"es\",\"value\":\"strongSwan 4.5.x hasta 5.2.x anterior a 5.2.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (referencia a puntero inv\u00e1lido) a trav\u00e9s de un mensaje IKEv2 Key Exchange (KE) manipulado con el grupo Diffie-Hellman (DH) 1025.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-19\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7B465A7-9C74-411B-B65A-892BED6FBD39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D84EEB7-9900-4765-A1AD-B005618ACEDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89057C10-2C55-45CB-8497-40E27EAED297\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D8A9FCA-801F-4320-A3EA-F3EA952F47A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7350416E-359D-45F4-A3AC-1CF7E6EC7ED3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23A022A5-6DDA-4B4C-8354-935F9D99BC74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73AED6DF-50C7-49DE-A9CA-A5AB519B4832\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BDCDDFD-E4ED-436F-A8AD-B218CC5790D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1650266B-7975-4ADB-8E7F-A2854ED27CCC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"944942A8-79D0-40AC-BE98-D552DCF2BB07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"905ABDB8-6CC3-4F7F-8853-8EDDA5E5AB8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14E2A13E-427F-45A7-B898-64C10CD8962B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40ED1E2A-B769-4B1D-83D1-300789E03C97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"339D620A-CD60-4078-81A1-5703B1CFBB3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0973151D-E7F0-4F3D-B2AD-62486C27DFEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A2A1F50-F88A-4601-9DAB-BD47BE0E7750\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBC48CDA-33DB-42E3-AEC7-431C62055E6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F0C952A-B468-4224-B871-D55B5E6D4164\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:strongswan:strongswan:5.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED1BE2B5-44E6-49C1-B030-58195ACC12CF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A10BC294-9196-425F-9FB0-B1625465B47F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49A63F39-30BE-443F-AF10-6245587D3359\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"56BDB5A0-0839-4A20-A003-B8CD56F48171\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"}]}]}],\"references\":[{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62071\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62083\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/62095\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62663\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3118\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/71894\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2450-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62071\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62083\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/62095\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62663\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3118\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/71894\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2450-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
fkie_cve-2014-9221
Vulnerability from fkie_nvd
Vendor | Product | Version | |
---|---|---|---|
strongswan | strongswan | 4.5.0 | |
strongswan | strongswan | 4.5.1 | |
strongswan | strongswan | 4.5.2 | |
strongswan | strongswan | 4.5.3 | |
strongswan | strongswan | 4.6.0 | |
strongswan | strongswan | 4.6.1 | |
strongswan | strongswan | 4.6.2 | |
strongswan | strongswan | 4.6.3 | |
strongswan | strongswan | 4.6.4 | |
strongswan | strongswan | 5.0.0 | |
strongswan | strongswan | 5.0.1 | |
strongswan | strongswan | 5.0.2 | |
strongswan | strongswan | 5.0.3 | |
strongswan | strongswan | 5.0.4 | |
strongswan | strongswan | 5.1.0 | |
strongswan | strongswan | 5.1.1 | |
strongswan | strongswan | 5.1.2 | |
strongswan | strongswan | 5.1.3 | |
strongswan | strongswan | 5.2.0 | |
opensuse | opensuse | 13.1 | |
opensuse | opensuse | 13.2 | |
canonical | ubuntu_linux | 14.04 | |
canonical | ubuntu_linux | 14.10 | |
fedoraproject | fedora | 21 | |
debian | debian_linux | 7.0 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "D7B465A7-9C74-411B-B65A-892BED6FBD39", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "3D84EEB7-9900-4765-A1AD-B005618ACEDF", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "89057C10-2C55-45CB-8497-40E27EAED297", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "6D8A9FCA-801F-4320-A3EA-F3EA952F47A6", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "7350416E-359D-45F4-A3AC-1CF7E6EC7ED3", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "23A022A5-6DDA-4B4C-8354-935F9D99BC74", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "73AED6DF-50C7-49DE-A9CA-A5AB519B4832", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "3BDCDDFD-E4ED-436F-A8AD-B218CC5790D3", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "1650266B-7975-4ADB-8E7F-A2854ED27CCC", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "944942A8-79D0-40AC-BE98-D552DCF2BB07", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "905ABDB8-6CC3-4F7F-8853-8EDDA5E5AB8F", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "14E2A13E-427F-45A7-B898-64C10CD8962B", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "40ED1E2A-B769-4B1D-83D1-300789E03C97", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "339D620A-CD60-4078-81A1-5703B1CFBB3D", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "0973151D-E7F0-4F3D-B2AD-62486C27DFEE", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "6A2A1F50-F88A-4601-9DAB-BD47BE0E7750", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "CBC48CDA-33DB-42E3-AEC7-431C62055E6E", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "3F0C952A-B468-4224-B871-D55B5E6D4164", "vulnerable": true }, { "criteria": "cpe:2.3:a:strongswan:strongswan:5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "ED1BE2B5-44E6-49C1-B030-58195ACC12CF", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F", "vulnerable": true }, { "criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084", "vulnerable": true }, { "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*", "matchCriteriaId": "49A63F39-30BE-443F-AF10-6245587D3359", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*", "matchCriteriaId": "56BDB5A0-0839-4A20-A003-B8CD56F48171", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025." }, { "lang": "es", "value": "strongSwan 4.5.x hasta 5.2.x anterior a 5.2.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (referencia a puntero inv\u00e1lido) a trav\u00e9s de un mensaje IKEv2 Key Exchange (KE) manipulado con el grupo Diffie-Hellman (DH) 1025." } ], "id": "CVE-2014-9221", "lastModified": "2025-04-12T10:46:40.837", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ] }, "published": "2015-01-07T19:59:01.137", "references": [ { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "source": "cve@mitre.org", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62071" }, { "source": "cve@mitre.org", "url": "http://secunia.com/advisories/62083" }, { "source": "cve@mitre.org", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62095" }, { "source": "cve@mitre.org", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62663" }, { "source": "cve@mitre.org", "tags": [ "Vendor Advisory" ], "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "source": "cve@mitre.org", "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3118" }, { "source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/71894" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "http://www.ubuntu.com/usn/USN-2450-1" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62071" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/62083" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62095" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62663" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3118" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/71894" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "http://www.ubuntu.com/usn/USN-2450-1" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-19" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
suse-su-2015:0281-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for strongswan", "title": "Title of the patch" }, { "category": "description", "text": "This strongswan update fixes the following security and non security\nissues.\n\n- Disallow brainpool elliptic curve groups in fips mode (bnc#856322).\n- Applied an upstream fix for a denial-of-service vulnerability,\n which can be triggered by an IKEv2 Key Exchange payload, that\n contains the Diffie-Hellman group 1025 (bsc#910491,CVE-2014-9221).\n- Adjusted whilelist of approved algorithms in fips mode (bsc#856322).\n- Updated strongswan-hmac package description (bsc#856322).\n- Disabled explicit gpg validation; osc source_validator does it.\n- Guarded fipscheck and hmac package in the spec file for \u003e13.1.\n- Added generation of fips hmac hash files using fipshmac utility\n and a _fipscheck script to verify binaries/libraries/plugings\n shipped in the strongswan-hmac package.\n With enabled fips in the kernel, the ipsec script will call it\n before any action or in a enforced/manual \u0027ipsec _fipscheck\u0027 call.\n Added config file to load openssl and kernel af-alg plugins, but\n not all the other modules which provide further/alternative algs.\n Applied a filter disallowing non-approved algorithms in fips mode.\n (fate#316931,bnc#856322).\n- Fixed file list in the optional (disabled) strongswan-test package.\n- Fixed build of the strongswan built-in integrity checksum library\n and enabled building it only on architectures tested to work.\n- Fix to use bug number 897048 instead 856322 in last changes entry.\n- Applied an upstream patch reverting to store algorithms in the\n registration order again as ordering them by identifier caused\n weaker algorithms to be proposed first by default (bsc#897512).", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLE-DESKTOP-12-2015-71,SUSE-SLE-SERVER-12-2015-71", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0281-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2015:0281-1", "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150281-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2015:0281-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-February/001221.html" }, { "category": "self", "summary": "SUSE Bug 856322", "url": "https://bugzilla.suse.com/856322" }, { "category": "self", "summary": "SUSE Bug 897048", "url": "https://bugzilla.suse.com/897048" }, { "category": "self", "summary": "SUSE Bug 897512", "url": "https://bugzilla.suse.com/897512" }, { "category": "self", "summary": "SUSE Bug 910491", "url": "https://bugzilla.suse.com/910491" }, { "category": "self", "summary": "SUSE CVE CVE-2014-9221 page", "url": "https://www.suse.com/security/cve/CVE-2014-9221/" } ], "title": "Security update for strongswan", "tracking": { "current_release_date": "2015-01-28T11:41:44Z", "generator": { "date": "2015-01-28T11:41:44Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2015:0281-1", "initial_release_date": "2015-01-28T11:41:44Z", "revision_history": [ { "date": "2015-01-28T11:41:44Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "strongswan-doc-5.1.3-9.1.noarch", "product": { "name": "strongswan-doc-5.1.3-9.1.noarch", "product_id": "strongswan-doc-5.1.3-9.1.noarch" } }, { "category": "product_version", "name": "strongswan-doc-5.1.3-9.2.noarch", "product": { "name": "strongswan-doc-5.1.3-9.2.noarch", "product_id": "strongswan-doc-5.1.3-9.2.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "strongswan-5.1.3-9.2.ppc64le", "product": { "name": "strongswan-5.1.3-9.2.ppc64le", "product_id": "strongswan-5.1.3-9.2.ppc64le" } }, { "category": "product_version", "name": "strongswan-hmac-5.1.3-9.2.ppc64le", "product": { "name": "strongswan-hmac-5.1.3-9.2.ppc64le", "product_id": "strongswan-hmac-5.1.3-9.2.ppc64le" } }, { "category": "product_version", "name": "strongswan-ipsec-5.1.3-9.2.ppc64le", "product": { "name": "strongswan-ipsec-5.1.3-9.2.ppc64le", "product_id": "strongswan-ipsec-5.1.3-9.2.ppc64le" } }, { "category": "product_version", "name": "strongswan-libs0-5.1.3-9.2.ppc64le", "product": { "name": "strongswan-libs0-5.1.3-9.2.ppc64le", "product_id": "strongswan-libs0-5.1.3-9.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "strongswan-5.1.3-9.2.s390x", "product": { "name": "strongswan-5.1.3-9.2.s390x", "product_id": "strongswan-5.1.3-9.2.s390x" } }, { "category": "product_version", "name": "strongswan-hmac-5.1.3-9.2.s390x", "product": { "name": "strongswan-hmac-5.1.3-9.2.s390x", "product_id": "strongswan-hmac-5.1.3-9.2.s390x" } }, { "category": "product_version", "name": "strongswan-ipsec-5.1.3-9.2.s390x", "product": { "name": "strongswan-ipsec-5.1.3-9.2.s390x", "product_id": "strongswan-ipsec-5.1.3-9.2.s390x" } }, { "category": "product_version", "name": "strongswan-libs0-5.1.3-9.2.s390x", "product": { "name": "strongswan-libs0-5.1.3-9.2.s390x", "product_id": "strongswan-libs0-5.1.3-9.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "strongswan-5.1.3-9.1.x86_64", "product": { "name": "strongswan-5.1.3-9.1.x86_64", "product_id": "strongswan-5.1.3-9.1.x86_64" } }, { "category": "product_version", "name": "strongswan-ipsec-5.1.3-9.1.x86_64", "product": { "name": "strongswan-ipsec-5.1.3-9.1.x86_64", "product_id": "strongswan-ipsec-5.1.3-9.1.x86_64" } }, { "category": "product_version", "name": "strongswan-libs0-5.1.3-9.1.x86_64", "product": { "name": "strongswan-libs0-5.1.3-9.1.x86_64", "product_id": "strongswan-libs0-5.1.3-9.1.x86_64" } }, { "category": "product_version", "name": "strongswan-5.1.3-9.2.x86_64", "product": { "name": "strongswan-5.1.3-9.2.x86_64", "product_id": "strongswan-5.1.3-9.2.x86_64" } }, { "category": "product_version", "name": "strongswan-hmac-5.1.3-9.2.x86_64", "product": { "name": "strongswan-hmac-5.1.3-9.2.x86_64", "product_id": "strongswan-hmac-5.1.3-9.2.x86_64" } }, { "category": "product_version", "name": "strongswan-ipsec-5.1.3-9.2.x86_64", "product": { "name": "strongswan-ipsec-5.1.3-9.2.x86_64", "product_id": "strongswan-ipsec-5.1.3-9.2.x86_64" } }, { "category": "product_version", "name": "strongswan-libs0-5.1.3-9.2.x86_64", "product": { "name": "strongswan-libs0-5.1.3-9.2.x86_64", "product_id": "strongswan-libs0-5.1.3-9.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12", "product": { "name": "SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12", "product": { "name": "SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.1.3-9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:strongswan-5.1.3-9.1.x86_64" }, "product_reference": "strongswan-5.1.3-9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-doc-5.1.3-9.1.noarch as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:strongswan-doc-5.1.3-9.1.noarch" }, "product_reference": "strongswan-doc-5.1.3-9.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.1.3-9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:strongswan-ipsec-5.1.3-9.1.x86_64" }, "product_reference": "strongswan-ipsec-5.1.3-9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.1.3-9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:strongswan-libs0-5.1.3-9.1.x86_64" }, "product_reference": "strongswan-libs0-5.1.3-9.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.s390x" }, "product_reference": "strongswan-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-doc-5.1.3-9.2.noarch as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-doc-5.1.3-9.2.noarch" }, "product_reference": "strongswan-doc-5.1.3-9.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-hmac-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.s390x" }, "product_reference": "strongswan-hmac-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-hmac-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-ipsec-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.s390x" }, "product_reference": "strongswan-ipsec-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-ipsec-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-libs0-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.s390x" }, "product_reference": "strongswan-libs0-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-libs0-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.s390x" }, "product_reference": "strongswan-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-doc-5.1.3-9.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-doc-5.1.3-9.2.noarch" }, "product_reference": "strongswan-doc-5.1.3-9.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-hmac-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.s390x" }, "product_reference": "strongswan-hmac-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-hmac-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-ipsec-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.s390x" }, "product_reference": "strongswan-ipsec-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-ipsec-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.1.3-9.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.ppc64le" }, "product_reference": "strongswan-libs0-5.1.3-9.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.1.3-9.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.s390x" }, "product_reference": "strongswan-libs0-5.1.3-9.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.1.3-9.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.x86_64" }, "product_reference": "strongswan-libs0-5.1.3-9.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-9221", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-9221" } ], "notes": [ { "category": "general", "text": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12:strongswan-5.1.3-9.1.x86_64", "SUSE Linux Enterprise Desktop 12:strongswan-doc-5.1.3-9.1.noarch", "SUSE Linux Enterprise Desktop 12:strongswan-ipsec-5.1.3-9.1.x86_64", "SUSE Linux Enterprise Desktop 12:strongswan-libs0-5.1.3-9.1.x86_64", "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server 12:strongswan-doc-5.1.3-9.2.noarch", "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-doc-5.1.3-9.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-9221", "url": "https://www.suse.com/security/cve/CVE-2014-9221" }, { "category": "external", "summary": "SUSE Bug 910491 for CVE-2014-9221", "url": "https://bugzilla.suse.com/910491" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12:strongswan-5.1.3-9.1.x86_64", "SUSE Linux Enterprise Desktop 12:strongswan-doc-5.1.3-9.1.noarch", "SUSE Linux Enterprise Desktop 12:strongswan-ipsec-5.1.3-9.1.x86_64", "SUSE Linux Enterprise Desktop 12:strongswan-libs0-5.1.3-9.1.x86_64", "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server 12:strongswan-doc-5.1.3-9.2.noarch", "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-hmac-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-ipsec-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server 12:strongswan-libs0-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-doc-5.1.3-9.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-hmac-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-ipsec-5.1.3-9.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12:strongswan-libs0-5.1.3-9.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-01-28T11:41:44Z", "details": "moderate" } ], "title": "CVE-2014-9221" } ] }
opensuse-su-2024:10579-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "strongswan-5.3.5-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the strongswan-5.3.5-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10579", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10579-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2009-0790 page", "url": "https://www.suse.com/security/cve/CVE-2009-0790/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-2388 page", "url": "https://www.suse.com/security/cve/CVE-2012-2388/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2944 page", "url": "https://www.suse.com/security/cve/CVE-2013-2944/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5018 page", "url": "https://www.suse.com/security/cve/CVE-2013-5018/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-6075 page", "url": "https://www.suse.com/security/cve/CVE-2013-6075/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-6076 page", "url": "https://www.suse.com/security/cve/CVE-2013-6076/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2338 page", "url": "https://www.suse.com/security/cve/CVE-2014-2338/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-9221 page", "url": "https://www.suse.com/security/cve/CVE-2014-9221/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3991 page", "url": "https://www.suse.com/security/cve/CVE-2015-3991/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-4171 page", "url": "https://www.suse.com/security/cve/CVE-2015-4171/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-8023 page", "url": "https://www.suse.com/security/cve/CVE-2015-8023/" } ], "title": "strongswan-5.3.5-1.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10579-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "strongswan-5.3.5-1.1.aarch64", "product": { "name": "strongswan-5.3.5-1.1.aarch64", "product_id": "strongswan-5.3.5-1.1.aarch64" } }, { "category": "product_version", "name": "strongswan-doc-5.3.5-1.1.aarch64", "product": { "name": "strongswan-doc-5.3.5-1.1.aarch64", "product_id": "strongswan-doc-5.3.5-1.1.aarch64" } }, { "category": "product_version", "name": "strongswan-hmac-5.3.5-1.1.aarch64", "product": { "name": "strongswan-hmac-5.3.5-1.1.aarch64", "product_id": "strongswan-hmac-5.3.5-1.1.aarch64" } }, { "category": "product_version", "name": "strongswan-ipsec-5.3.5-1.1.aarch64", "product": { "name": "strongswan-ipsec-5.3.5-1.1.aarch64", "product_id": "strongswan-ipsec-5.3.5-1.1.aarch64" } }, { "category": "product_version", "name": "strongswan-libs0-5.3.5-1.1.aarch64", "product": { "name": "strongswan-libs0-5.3.5-1.1.aarch64", "product_id": "strongswan-libs0-5.3.5-1.1.aarch64" } }, { "category": "product_version", "name": "strongswan-mysql-5.3.5-1.1.aarch64", "product": { "name": "strongswan-mysql-5.3.5-1.1.aarch64", "product_id": "strongswan-mysql-5.3.5-1.1.aarch64" } }, { "category": "product_version", "name": "strongswan-nm-5.3.5-1.1.aarch64", "product": { "name": "strongswan-nm-5.3.5-1.1.aarch64", "product_id": "strongswan-nm-5.3.5-1.1.aarch64" } }, { "category": "product_version", "name": "strongswan-sqlite-5.3.5-1.1.aarch64", "product": { "name": "strongswan-sqlite-5.3.5-1.1.aarch64", "product_id": "strongswan-sqlite-5.3.5-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "strongswan-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-5.3.5-1.1.ppc64le", "product_id": "strongswan-5.3.5-1.1.ppc64le" } }, { "category": "product_version", "name": "strongswan-doc-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-doc-5.3.5-1.1.ppc64le", "product_id": "strongswan-doc-5.3.5-1.1.ppc64le" } }, { "category": "product_version", "name": "strongswan-hmac-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-hmac-5.3.5-1.1.ppc64le", "product_id": "strongswan-hmac-5.3.5-1.1.ppc64le" } }, { "category": "product_version", "name": "strongswan-ipsec-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-ipsec-5.3.5-1.1.ppc64le", "product_id": "strongswan-ipsec-5.3.5-1.1.ppc64le" } }, { "category": "product_version", "name": "strongswan-libs0-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-libs0-5.3.5-1.1.ppc64le", "product_id": "strongswan-libs0-5.3.5-1.1.ppc64le" } }, { "category": "product_version", "name": "strongswan-mysql-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-mysql-5.3.5-1.1.ppc64le", "product_id": "strongswan-mysql-5.3.5-1.1.ppc64le" } }, { "category": "product_version", "name": "strongswan-nm-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-nm-5.3.5-1.1.ppc64le", "product_id": "strongswan-nm-5.3.5-1.1.ppc64le" } }, { "category": "product_version", "name": "strongswan-sqlite-5.3.5-1.1.ppc64le", "product": { "name": "strongswan-sqlite-5.3.5-1.1.ppc64le", "product_id": "strongswan-sqlite-5.3.5-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "strongswan-5.3.5-1.1.s390x", "product": { "name": "strongswan-5.3.5-1.1.s390x", "product_id": "strongswan-5.3.5-1.1.s390x" } }, { "category": "product_version", "name": "strongswan-doc-5.3.5-1.1.s390x", "product": { "name": "strongswan-doc-5.3.5-1.1.s390x", "product_id": "strongswan-doc-5.3.5-1.1.s390x" } }, { "category": "product_version", "name": "strongswan-hmac-5.3.5-1.1.s390x", "product": { "name": "strongswan-hmac-5.3.5-1.1.s390x", "product_id": "strongswan-hmac-5.3.5-1.1.s390x" } }, { "category": "product_version", "name": "strongswan-ipsec-5.3.5-1.1.s390x", "product": { "name": "strongswan-ipsec-5.3.5-1.1.s390x", "product_id": "strongswan-ipsec-5.3.5-1.1.s390x" } }, { "category": "product_version", "name": "strongswan-libs0-5.3.5-1.1.s390x", "product": { "name": "strongswan-libs0-5.3.5-1.1.s390x", "product_id": "strongswan-libs0-5.3.5-1.1.s390x" } }, { "category": "product_version", "name": "strongswan-mysql-5.3.5-1.1.s390x", "product": { "name": "strongswan-mysql-5.3.5-1.1.s390x", "product_id": "strongswan-mysql-5.3.5-1.1.s390x" } }, { "category": "product_version", "name": "strongswan-nm-5.3.5-1.1.s390x", "product": { "name": "strongswan-nm-5.3.5-1.1.s390x", "product_id": "strongswan-nm-5.3.5-1.1.s390x" } }, { "category": "product_version", "name": "strongswan-sqlite-5.3.5-1.1.s390x", "product": { "name": "strongswan-sqlite-5.3.5-1.1.s390x", "product_id": "strongswan-sqlite-5.3.5-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "strongswan-5.3.5-1.1.x86_64", "product": { "name": "strongswan-5.3.5-1.1.x86_64", "product_id": "strongswan-5.3.5-1.1.x86_64" } }, { "category": "product_version", "name": "strongswan-doc-5.3.5-1.1.x86_64", "product": { "name": "strongswan-doc-5.3.5-1.1.x86_64", "product_id": "strongswan-doc-5.3.5-1.1.x86_64" } }, { "category": "product_version", "name": "strongswan-hmac-5.3.5-1.1.x86_64", "product": { "name": "strongswan-hmac-5.3.5-1.1.x86_64", "product_id": "strongswan-hmac-5.3.5-1.1.x86_64" } }, { "category": "product_version", "name": "strongswan-ipsec-5.3.5-1.1.x86_64", "product": { "name": "strongswan-ipsec-5.3.5-1.1.x86_64", "product_id": "strongswan-ipsec-5.3.5-1.1.x86_64" } }, { "category": "product_version", "name": "strongswan-libs0-5.3.5-1.1.x86_64", "product": { "name": "strongswan-libs0-5.3.5-1.1.x86_64", "product_id": "strongswan-libs0-5.3.5-1.1.x86_64" } }, { "category": "product_version", "name": "strongswan-mysql-5.3.5-1.1.x86_64", "product": { "name": "strongswan-mysql-5.3.5-1.1.x86_64", "product_id": "strongswan-mysql-5.3.5-1.1.x86_64" } }, { "category": "product_version", "name": "strongswan-nm-5.3.5-1.1.x86_64", "product": { "name": "strongswan-nm-5.3.5-1.1.x86_64", "product_id": "strongswan-nm-5.3.5-1.1.x86_64" } }, { "category": "product_version", "name": "strongswan-sqlite-5.3.5-1.1.x86_64", "product": { "name": "strongswan-sqlite-5.3.5-1.1.x86_64", "product_id": "strongswan-sqlite-5.3.5-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x" }, "product_reference": "strongswan-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-doc-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-doc-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-doc-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-doc-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-doc-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x" }, "product_reference": "strongswan-doc-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-doc-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-doc-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-hmac-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-hmac-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x" }, "product_reference": "strongswan-hmac-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-hmac-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-hmac-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-ipsec-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-ipsec-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x" }, "product_reference": "strongswan-ipsec-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-ipsec-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-ipsec-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-libs0-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-libs0-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x" }, "product_reference": "strongswan-libs0-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-libs0-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-libs0-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-mysql-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-mysql-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-mysql-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-mysql-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-mysql-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x" }, "product_reference": "strongswan-mysql-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-mysql-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-mysql-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-nm-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-nm-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-nm-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-nm-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-nm-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x" }, "product_reference": "strongswan-nm-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-nm-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-nm-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-sqlite-5.3.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64" }, "product_reference": "strongswan-sqlite-5.3.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-sqlite-5.3.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le" }, "product_reference": "strongswan-sqlite-5.3.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-sqlite-5.3.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x" }, "product_reference": "strongswan-sqlite-5.3.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "strongswan-sqlite-5.3.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" }, "product_reference": "strongswan-sqlite-5.3.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-0790", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-0790" } ], "notes": [ { "category": "general", "text": "The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-0790", "url": "https://www.suse.com/security/cve/CVE-2009-0790" }, { "category": "external", "summary": "SUSE Bug 487762 for CVE-2009-0790", "url": "https://bugzilla.suse.com/487762" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-0790" }, { "cve": "CVE-2012-2388", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-2388" } ], "notes": [ { "category": "general", "text": "The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka \"RSA signature verification vulnerability.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-2388", "url": "https://www.suse.com/security/cve/CVE-2012-2388" }, { "category": "external", "summary": "SUSE Bug 1107874 for CVE-2012-2388", "url": "https://bugzilla.suse.com/1107874" }, { "category": "external", "summary": "SUSE Bug 761325 for CVE-2012-2388", "url": "https://bugzilla.suse.com/761325" }, { "category": "external", "summary": "SUSE Bug 815236 for CVE-2012-2388", "url": "https://bugzilla.suse.com/815236" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2012-2388" }, { "cve": "CVE-2013-2944", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2944" } ], "notes": [ { "category": "general", "text": "strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2944", "url": "https://www.suse.com/security/cve/CVE-2013-2944" }, { "category": "external", "summary": "SUSE Bug 815236 for CVE-2013-2944", "url": "https://bugzilla.suse.com/815236" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2013-2944" }, { "cve": "CVE-2013-5018", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5018" } ], "notes": [ { "category": "general", "text": "The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5018", "url": "https://www.suse.com/security/cve/CVE-2013-5018" }, { "category": "external", "summary": "SUSE Bug 833278 for CVE-2013-5018", "url": "https://bugzilla.suse.com/833278" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2013-5018" }, { "cve": "CVE-2013-6075", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-6075" } ], "notes": [ { "category": "general", "text": "The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-6075", "url": "https://www.suse.com/security/cve/CVE-2013-6075" }, { "category": "external", "summary": "SUSE Bug 847506 for CVE-2013-6075", "url": "https://bugzilla.suse.com/847506" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2013-6075" }, { "cve": "CVE-2013-6076", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-6076" } ], "notes": [ { "category": "general", "text": "strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-6076", "url": "https://www.suse.com/security/cve/CVE-2013-6076" }, { "category": "external", "summary": "SUSE Bug 847509 for CVE-2013-6076", "url": "https://bugzilla.suse.com/847509" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2013-6076" }, { "cve": "CVE-2014-2338", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2338" } ], "notes": [ { "category": "general", "text": "IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2338", "url": "https://www.suse.com/security/cve/CVE-2014-2338" }, { "category": "external", "summary": "SUSE Bug 870572 for CVE-2014-2338", "url": "https://bugzilla.suse.com/870572" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-2338" }, { "cve": "CVE-2014-9221", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-9221" } ], "notes": [ { "category": "general", "text": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-9221", "url": "https://www.suse.com/security/cve/CVE-2014-9221" }, { "category": "external", "summary": "SUSE Bug 910491 for CVE-2014-9221", "url": "https://bugzilla.suse.com/910491" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-9221" }, { "cve": "CVE-2015-3991", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3991" } ], "notes": [ { "category": "general", "text": "strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3991", "url": "https://www.suse.com/security/cve/CVE-2015-3991" }, { "category": "external", "summary": "SUSE Bug 931272 for CVE-2015-3991", "url": "https://bugzilla.suse.com/931272" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2015-3991" }, { "cve": "CVE-2015-4171", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-4171" } ], "notes": [ { "category": "general", "text": "strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-4171", "url": "https://www.suse.com/security/cve/CVE-2015-4171" }, { "category": "external", "summary": "SUSE Bug 931845 for CVE-2015-4171", "url": "https://bugzilla.suse.com/931845" }, { "category": "external", "summary": "SUSE Bug 933591 for CVE-2015-4171", "url": "https://bugzilla.suse.com/933591" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2015-4171" }, { "cve": "CVE-2015-8023", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-8023" } ], "notes": [ { "category": "general", "text": "The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-8023", "url": "https://www.suse.com/security/cve/CVE-2015-8023" }, { "category": "external", "summary": "SUSE Bug 953817 for CVE-2015-8023", "url": "https://bugzilla.suse.com/953817" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:strongswan-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-doc-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-hmac-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-ipsec-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-libs0-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-mysql-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-nm-5.3.5-1.1.x86_64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.aarch64", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.ppc64le", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.s390x", "openSUSE Tumbleweed:strongswan-sqlite-5.3.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2015-8023" } ] }
ghsa-r7v4-h67j-q6qx
Vulnerability from github
strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.
{ "affected": [], "aliases": [ "CVE-2014-9221" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-01-07T19:59:00Z", "severity": "MODERATE" }, "details": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.", "id": "GHSA-r7v4-h67j-q6qx", "modified": "2025-04-12T12:43:51Z", "published": "2022-05-14T02:05:55Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9221" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/62071" }, { "type": "WEB", "url": "http://secunia.com/advisories/62083" }, { "type": "WEB", "url": "http://secunia.com/advisories/62095" }, { "type": "WEB", "url": "http://secunia.com/advisories/62663" }, { "type": "WEB", "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "type": "WEB", "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-%28cve-2014-9221%29.html" }, { "type": "WEB", "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-(cve-2014-9221).html" }, { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3118" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/71894" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2450-1" } ], "schema_version": "1.4.0", "severity": [] }
gsd-2014-9221
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2014-9221", "description": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.", "id": "GSD-2014-9221", "references": [ "https://www.suse.com/security/cve/CVE-2014-9221.html", "https://www.debian.org/security/2015/dsa-3118", "https://ubuntu.com/security/CVE-2014-9221" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2014-9221" ], "details": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.", "id": "GSD-2014-9221", "modified": "2023-12-13T01:22:48.317539Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-9221", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "62095", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62095" }, { "name": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-(cve-2014-9221).html", "refsource": "CONFIRM", "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-(cve-2014-9221).html" }, { "name": "USN-2450-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-2450-1" }, { "name": "DSA-3118", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2015/dsa-3118" }, { "name": "62071", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62071" }, { "name": "FEDORA-2015-3043", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "name": "62663", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62663" }, { "name": "openSUSE-SU-2015:0114", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "name": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html", "refsource": "CONFIRM", "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "name": "62083", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62083" }, { "name": "71894", "refsource": "BID", "url": "http://www.securityfocus.com/bid/71894" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-9221" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-19" } ] } ] }, "references": { "reference_data": [ { "name": "USN-2450-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "http://www.ubuntu.com/usn/USN-2450-1" }, { "name": "DSA-3118", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3118" }, { "name": "62095", "refsource": "SECUNIA", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62095" }, { "name": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html", "refsource": "CONFIRM", "tags": [ "Vendor Advisory" ], "url": "http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html" }, { "name": "62071", "refsource": "SECUNIA", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62071" }, { "name": "62663", "refsource": "SECUNIA", "tags": [ "Permissions Required", "Third Party Advisory" ], "url": "http://secunia.com/advisories/62663" }, { "name": "openSUSE-SU-2015:0114", "refsource": "SUSE", "tags": [ "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" }, { "name": "FEDORA-2015-3043", "refsource": "FEDORA", "tags": [ "Third Party Advisory" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153825.html" }, { "name": "71894", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/71894" }, { "name": "62083", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/62083" }, { "name": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-(cve-2014-9221).html", "refsource": "CONFIRM", "tags": [], "url": "http://strongswan.org/blog/2015/01/05/strongswan-denial-of-service-vulnerability-(cve-2014-9221).html" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false } }, "lastModifiedDate": "2018-10-30T16:27Z", "publishedDate": "2015-01-07T19:59Z" } } }
cnvd-2015-00154
Vulnerability from cnvd
Title: Strongswan IKEv2 Payloads远程拒绝服务漏洞
Description:
strongSwan是一个完整的2.4和2.6的Linux内核下的IPsec和IKEv1的实现。它也完全支持新的IKEv2协议的Linux2.6内核。
Strongswan IKEv2 Payloads存在远程拒绝服务漏洞,攻击者可能会利用此漏洞使应用程序崩溃,拒绝服务合法用户。
Severity: 中
Patch Name: Strongswan IKEv2 Payloads远程拒绝服务漏洞的补丁
Patch Description:
strongSwan是一个完整的2.4和2.6的Linux内核下的IPsec和IKEv1的实现。它也完全支持新的IKEv2协议的Linux2.6内核。Strongswan IKEv2 Payloads存在远程拒绝服务漏洞,攻击者可能会利用此漏洞使应用程序崩溃,拒绝服务合法用户。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description:
用户可联系供应商获得补丁信息: http://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html
Reference: http://www.securityfocus.com/bid/71894
Name | Strongswan Strongswan 5.1.2 |
---|
{ "bids": { "bid": { "bidNumber": "71894" } }, "cves": { "cve": { "cveNumber": "CVE-2014-9221" } }, "description": "strongSwan\u662f\u4e00\u4e2a\u5b8c\u6574\u76842.4\u548c2.6\u7684Linux\u5185\u6838\u4e0b\u7684IPsec\u548cIKEv1\u7684\u5b9e\u73b0\u3002\u5b83\u4e5f\u5b8c\u5168\u652f\u6301\u65b0\u7684IKEv2\u534f\u8bae\u7684Linux2.6\u5185\u6838\u3002 \r\n\r\nStrongswan IKEv2 Payloads\u5b58\u5728\u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u80fd\u4f1a\u5229\u7528\u6b64\u6f0f\u6d1e\u4f7f\u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83\uff0c\u62d2\u7edd\u670d\u52a1\u5408\u6cd5\u7528\u6237\u3002", "discovererName": "Mike Daskalakis", "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://strongswan.org/blog/2015/01/05/strongswan-5.2.2-released.html", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2015-00154", "openTime": "2015-01-09", "patchDescription": "strongSwan\u662f\u4e00\u4e2a\u5b8c\u6574\u76842.4\u548c2.6\u7684Linux\u5185\u6838\u4e0b\u7684IPsec\u548cIKEv1\u7684\u5b9e\u73b0\u3002\u5b83\u4e5f\u5b8c\u5168\u652f\u6301\u65b0\u7684IKEv2\u534f\u8bae\u7684Linux2.6\u5185\u6838\u3002Strongswan IKEv2 Payloads\u5b58\u5728\u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u80fd\u4f1a\u5229\u7528\u6b64\u6f0f\u6d1e\u4f7f\u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83\uff0c\u62d2\u7edd\u670d\u52a1\u5408\u6cd5\u7528\u6237\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Strongswan IKEv2 Payloads\u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01", "products": { "product": "Strongswan Strongswan 5.1.2" }, "referenceLink": "http://www.securityfocus.com/bid/71894", "serverity": "\u4e2d", "submitTime": "2015-01-08", "title": "Strongswan IKEv2 Payloads\u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e" }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.