OESA-2022-2068

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2068
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-2068.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2022-2068
Upstream
Published
2022-11-11T11:04:33Z
Modified
2025-09-03T06:17:44.400585Z
Summary
strongswan security update
Details

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.

Security Fix(es):

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.(CVE-2021-45079)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:22.03-LTS / strongswan

Package

Name
strongswan
Purl
pkg:rpm/openEuler/strongswan&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.7.2-12.oe2203

Ecosystem specific 

{
    "x86_64": [
        "strongswan-tnc-imcvs-5.7.2-12.oe2203.x86_64.rpm",
        "strongswan-5.7.2-12.oe2203.x86_64.rpm",
        "strongswan-debugsource-5.7.2-12.oe2203.x86_64.rpm",
        "strongswan-charon-nm-5.7.2-12.oe2203.x86_64.rpm",
        "strongswan-debuginfo-5.7.2-12.oe2203.x86_64.rpm",
        "strongswan-libipsec-5.7.2-12.oe2203.x86_64.rpm",
        "strongswan-sqlite-5.7.2-12.oe2203.x86_64.rpm"
    ],
    "src": [
        "strongswan-5.7.2-12.oe2203.src.rpm"
    ],
    "aarch64": [
        "strongswan-debugsource-5.7.2-12.oe2203.aarch64.rpm",
        "strongswan-libipsec-5.7.2-12.oe2203.aarch64.rpm",
        "strongswan-charon-nm-5.7.2-12.oe2203.aarch64.rpm",
        "strongswan-debuginfo-5.7.2-12.oe2203.aarch64.rpm",
        "strongswan-sqlite-5.7.2-12.oe2203.aarch64.rpm",
        "strongswan-tnc-imcvs-5.7.2-12.oe2203.aarch64.rpm",
        "strongswan-5.7.2-12.oe2203.aarch64.rpm"
    ]
}