In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0492-1 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0492-1 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14887-1 advisory.

  - In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x     before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm     OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan     regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents     are being used, which could lead to impersonation when only an RSA signature is used for IKEv2     authentication. (CVE-2018-16151)

  - In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x     before 5.7.0, the RSA implementation based on GMP does not reject excess data in the     digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote     attacker can forge signatures when small public exponents are being used, which could lead to     impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of     CVE-2006-4790 and CVE-2014-1568. (CVE-2018-16152)

  - The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
    (CVE-2018-17540)

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2909 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5056 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ccaea96b-7dcd-11ec-93df-00224d821998 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0211-1 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0202-1 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5250-2 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 21.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5250-1 advisory.

  - In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without     actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only     authentication for IKEv2) even without server authentication. (CVE-2021-45079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
158223	openSUSE 15 Security Update : strongswan (openSUSE-SU-2022:0492-1)	Nessus	SuSE Local Security Checks	critical
158185	SUSE SLED15 / SLES15 Security Update : strongswan (SUSE-SU-2022:0492-1)	Nessus	SuSE Local Security Checks	critical
158172	SUSE SLES11 Security Update : strongswan (SUSE-SU-2022:14887-1)	Nessus	SuSE Local Security Checks	critical
157379	Debian DLA-2909-1 : strongswan - LTS security update	Nessus	Debian Local Security Checks	critical
157253	Debian DSA-5056-1 : strongswan - security update	Nessus	Debian Local Security Checks	critical
157235	FreeBSD : strongswan - Incorrect Handling of Early EAP-Success Messages (ccaea96b-7dcd-11ec-93df-00224d821998)	Nessus	FreeBSD Local Security Checks	critical
157180	SUSE SLES15 Security Update : strongswan (SUSE-SU-2022:0211-1)	Nessus	SuSE Local Security Checks	critical
157151	SUSE SLES12 Security Update : strongswan (SUSE-SU-2022:0202-1)	Nessus	SuSE Local Security Checks	critical
157059	Ubuntu 16.04 ESM : strongSwan vulnerability (USN-5250-2)	Nessus	Ubuntu Local Security Checks	critical
157057	Ubuntu 18.04 LTS / 20.04 LTS : strongSwan vulnerability (USN-5250-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2021-45079

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical