IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade strongswan | Jul 30, 2024 | Apr 16, 2014 |
| Freebsd | — | Upgrade strongswan | Dec 10, 2025 | May 4, 2014 |
| Gentoo Linux | — | Upgrade net-misc/strongswan. | Oct 30, 2017 | Apr 16, 2014 |
| Suse | — | Upgrade strongswan-hmacUpgrade strongswan-docUpgrade strongswan-libs0Upgrade strongswan-ipsecUpgrade strongswan | Dec 18, 2015 | Apr 15, 2014 |
| Ubuntu | — | Upgrade strongswan | Nov 19, 2024 | Apr 16, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub