CVE Vulnerabilities

CVE-2014-2338

Improper Authentication

Published: Apr 16, 2014 | Modified: Nov 28, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Strongswan Strongswan 4.1.8 4.1.8
Strongswan Strongswan 4.1.11 4.1.11
Strongswan Strongswan 4.3.7 4.3.7
Strongswan Strongswan 4.2.6 4.2.6
Strongswan Strongswan 4.2.12 4.2.12
Strongswan Strongswan 4.1.1 4.1.1
Strongswan Strongswan 4.2.10 4.2.10
Strongswan Strongswan 5.1.2 5.1.2
Strongswan Strongswan 4.2.16 4.2.16
Strongswan Strongswan 4.1.10 4.1.10
Strongswan Strongswan 4.5.3 4.5.3
Strongswan Strongswan 4.1.4 4.1.4
Strongswan Strongswan 4.5.2 4.5.2
Strongswan Strongswan 5.0.1 5.0.1
Strongswan Strongswan 4.4.0 4.4.0
Strongswan Strongswan 5.1.0 5.1.0
Strongswan Strongswan 4.2.9 4.2.9
Strongswan Strongswan 4.5.1 4.5.1
Strongswan Strongswan 4.2.14 4.2.14
Strongswan Strongswan 4.3.5 4.3.5
Strongswan Strongswan 4.0.7 4.0.7
Strongswan Strongswan 4.2.3 4.2.3
Strongswan Strongswan 4.3.2 4.3.2
Strongswan Strongswan 4.2.5 4.2.5
Strongswan Strongswan 4.6.4 4.6.4
Strongswan Strongswan 4.2.8 4.2.8
Strongswan Strongswan 4.3.3 4.3.3
Strongswan Strongswan 4.6.2 4.6.2
Strongswan Strongswan 5.1.1 5.1.1
Strongswan Strongswan 4.2.0 4.2.0
Strongswan Strongswan 4.2.1 4.2.1
Strongswan Strongswan 4.1.7 4.1.7
Strongswan Strongswan 4.1.6 4.1.6
Strongswan Strongswan 4.1.5 4.1.5
Strongswan Strongswan 5.0.3 5.0.3
Strongswan Strongswan 4.2.13 4.2.13
Strongswan Strongswan 5.0.4 5.0.4
Strongswan Strongswan 4.3.0 4.3.0
Strongswan Strongswan 4.6.1 4.6.1
Strongswan Strongswan 4.2.11 4.2.11
Strongswan Strongswan 4.2.4 4.2.4
Strongswan Strongswan 5.0.2 5.0.2
Strongswan Strongswan 4.3.6 4.3.6
Strongswan Strongswan 4.6.0 4.6.0
Strongswan Strongswan 4.6.3 4.6.3
Strongswan Strongswan 4.1.2 4.1.2
Strongswan Strongswan 4.1.9 4.1.9
Strongswan Strongswan 5.0.0 5.0.0
Strongswan Strongswan 4.2.7 4.2.7
Strongswan Strongswan 4.2.2 4.2.2
Strongswan Strongswan 4.4.1 4.4.1
Strongswan Strongswan 4.5.0 4.5.0
Strongswan Strongswan 4.3.1 4.3.1
Strongswan Strongswan 4.2.15 4.2.15
Strongswan Strongswan 4.3.4 4.3.4
Strongswan Strongswan 4.1.0 4.1.0
Strongswan Strongswan 4.1.3 4.1.3

Potential Mitigations

References