Поиск уязвимостей
Количество 10
Количество 10
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
CVE-2015-8023
The server implementation of the EAP-MSCHAPv2 protocol in the eap-msch ...
openSUSE-SU-2015:2103-1
Security update for strongswan
SUSE-SU-2015:2186-1
Security update for strongswan
SUSE-SU-2015:2183-2
Security update for strongswan
SUSE-SU-2015:2183-1
Security update for strongswan
GHSA-4qm7-rm85-wr68
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
ALT-PU-2015-2000
ALT-PU-2015-2000: package `strongswan` update to version 5.3.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
 | CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | CVSS2: 6.4 | 3% Низкий | почти 11 лет назад |
 | CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
| CVE-2015-8023 The server implementation of the EAP-MSCHAPv2 protocol in the eap-msch ... | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
 | openSUSE-SU-2015:2103-1 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| SUSE-SU-2015:2186-1 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| SUSE-SU-2015:2183-2 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| SUSE-SU-2015:2183-1 Security update for strongswan | 3% Низкий | почти 11 лет назад | |
| GHSA-4qm7-rm85-wr68 The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. | 3% Низкий | больше 4 лет назад | |
| ALT-PU-2015-2000 ALT-PU-2015-2000: package `strongswan` update to version 5.3.4-alt1 | CVSS2: 5 | 3% Низкий | почти 11 лет назад |
Уязвимостей на страницу