NVD

Id
30770  
Name
CVE-2014-2338  
Description
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-16  
Modified Date
2016-11-28  
Seq
2014-2338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162136 30770 CVE-2014-2338 SUSE-SU-2014:0529  View
162137 30770 CVE-2014-2338 openSUSE-SU-2014:0697  View
162138 30770 CVE-2014-2338 openSUSE-SU-2014:0700  View
162139 30770 CVE-2014-2338 DSA-2903  View
162140 30770 CVE-2014-2338 66815  View
162141 30770 CVE-2014-2338 http://www.strongswan.org/blog/2014/04/14/strongswan-authentication-bypass-vulnerability-%28cve-2014-2338%29.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13294 JVNDB-2014-002169 strongSwan の IKEv2 における認証を回避される脆弱性 strongSwan の IKEv2 には、認証を回避される脆弱性が存在します。 CVE-2014-2338 69625 CVE-2014-2338 30770 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002169.html 2014-04-14 2014-04-22 View