CVE

Id
69633  
CVE No.
CVE-2014-2338  
Status
Candidate  
Description
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.  
Phase
Assigned (20140312)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
666314 69633 CVE-2014-2338 CONFIRM:http://www.strongswan.org/blog/2014/04/14/strongswan-authentication-bypass-vulnerability-%28cve-2014-2338%29.html  View
666315 69633 CVE-2014-2338 DEBIAN:DSA-2903  View
666316 69633 CVE-2014-2338 URL:http://www.debian.org/security/2014/dsa-2903  View
666317 69633 CVE-2014-2338 SUSE:SUSE-SU-2014:0529  View
666318 69633 CVE-2014-2338 URL:http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00010.html  View
666319 69633 CVE-2014-2338 SUSE:openSUSE-SU-2014:0697  View
666320 69633 CVE-2014-2338 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00064.html  View
666321 69633 CVE-2014-2338 SUSE:openSUSE-SU-2014:0700  View
666322 69633 CVE-2014-2338 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html  View
666323 69633 CVE-2014-2338 BID:66815  View
666324 69633 CVE-2014-2338 URL:http://www.securityfocus.com/bid/66815  View
666325 69633 CVE-2014-2338 SECUNIA:57823  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13885 JVNDB-2014-002760 COPA-DATA zenon DNP3 NG ドライバおよび zenon DNP3 Process Gateway におけるサービス運用妨害 (DoS) の脆弱性 COPA-DATA zenon DNP3 NG ドライバ (DNP3 master) および zenon DNP3 Process Gateway (DNP3 outstation) には、サービス運用妨害 (無限ループおよびプロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-2346 69633 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002760.html  View