FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
6fb521b0-d388-11e3-a790-000c2980a9f3	strongswan -- Remote Authentication Bypass strongSwan developers report: Remote attackers are able to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established. Only installations that actively initiate or re-authenticate IKEv2 IKE_SAs are affected. Discovery 2014-03-12 Entry 2014-05-04 strongswan < 5.1.3 CVE-2014-2338 http://www.strongswan.org/blog/2014/04/14/strongswan-authentication-bypass-vulnerability-%28cve-2014-2338%29.html

VuXML ID

Description

6fb521b0-d388-11e3-a790-000c2980a9f3

strongswan -- Remote Authentication Bypass

strongSwan developers report:

Remote attackers are able to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.

Only installations that actively initiate or re-authenticate IKEv2 IKE_SAs are affected.

Discovery 2014-03-12
Entry 2014-05-04
strongswan

< 5.1.3

CVE-2014-2338
http://www.strongswan.org/blog/2014/04/14/strongswan-authentication-bypass-vulnerability-%28cve-2014-2338%29.html