rpm package
suse/strongswan&distro=SUSE Linux Enterprise Real Time 15 SP2
pkg:rpm/suse/strongswan&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-45079 | — | < 5.8.2-11.24.1 | 5.8.2-11.24.1 | Jan 31, 2022 | In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication. |
- CVE-2021-45079Jan 31, 2022affected < 5.8.2-11.24.1fixed 5.8.2-11.24.1
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.