UBUNTU-CVE-2018-5389

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2018-5389
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-5389.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-5389
Related
Published
2018-09-06T21:29:00Z
Modified
2025-01-13T10:21:34Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.

References

Affected packages

Ubuntu:Pro:14.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.1.2-0ubuntu2.11+esm3?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.6.4-9

5.*

5.1.0-2
5.1.0-3
5.1.1-0ubuntu1
5.1.1-0ubuntu2
5.1.1-0ubuntu3
5.1.1-0ubuntu4
5.1.1-0ubuntu5
5.1.1-0ubuntu7
5.1.1-0ubuntu14
5.1.1-0ubuntu17
5.1.2~dr3+git20130120-0ubuntu2
5.1.2~dr3+git20130120-0ubuntu3
5.1.2~rc1-0ubuntu3
5.1.2~rc1-0ubuntu4
5.1.2~rc2-0ubuntu2
5.1.2-0ubuntu1
5.1.2-0ubuntu2
5.1.2-0ubuntu2.2
5.1.2-0ubuntu2.3
5.1.2-0ubuntu2.4
5.1.2-0ubuntu2.5
5.1.2-0ubuntu2.6
5.1.2-0ubuntu2.7
5.1.2-0ubuntu2.8
5.1.2-0ubuntu2.10
5.1.2-0ubuntu2.11
5.1.2-0ubuntu2.11+esm1
5.1.2-0ubuntu2.11+esm2
5.1.2-0ubuntu2.11+esm3

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.3.5-1ubuntu3.8+esm4?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.1.2-0ubuntu6
5.1.2-0ubuntu7
5.1.2-0ubuntu8
5.3.5-1ubuntu1
5.3.5-1ubuntu2
5.3.5-1ubuntu3
5.3.5-1ubuntu3.1
5.3.5-1ubuntu3.2
5.3.5-1ubuntu3.3
5.3.5-1ubuntu3.4
5.3.5-1ubuntu3.5
5.3.5-1ubuntu3.7
5.3.5-1ubuntu3.8
5.3.5-1ubuntu3.8+esm1
5.3.5-1ubuntu3.8+esm2
5.3.5-1ubuntu3.8+esm3
5.3.5-1ubuntu3.8+esm4

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / ipsec-tools

Package

Name
ipsec-tools
Purl
pkg:deb/ubuntu/ipsec-tools@1:0.8.2+20140711-5?arch=source&distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:0.*

1:0.8.2+20140711-4
1:0.8.2+20140711-5

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / isakmpd

Package

Name
isakmpd
Purl
pkg:deb/ubuntu/isakmpd@20041012-7.2ubuntu2?arch=source&distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

20041012-7.*

20041012-7.2ubuntu1
20041012-7.2ubuntu2

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:FIPS:16.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.3.5-1ubuntu3.fips.3.8.7?arch=source&distro=fips-updates/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.5-1ubuntu3.fips.3.4.1
5.3.5-1ubuntu3.fips.3.4.2
5.3.5-1ubuntu3.fips.3.8.1
5.3.5-1ubuntu3.fips.3.8.2
5.3.5-1ubuntu3.fips.3.8.3
5.3.5-1ubuntu3.fips.3.8.6
5.3.5-1ubuntu3.fips.3.8.7

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:FIPS:16.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.3.5-1ubuntu3.fips.3.3?arch=source&distro=fips/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.5-1ubuntu3.fips.3.1
5.3.5-1ubuntu3.fips.3.2
5.3.5-1ubuntu3.fips.3.3

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.6.2-1ubuntu2.9+esm1?arch=source&distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.5.1-4ubuntu2
5.5.1-4ubuntu3
5.6.1-2ubuntu1
5.6.1-2ubuntu2
5.6.1-2ubuntu3
5.6.1-2ubuntu4
5.6.2-1ubuntu2
5.6.2-1ubuntu2.2
5.6.2-1ubuntu2.3
5.6.2-1ubuntu2.4
5.6.2-1ubuntu2.5
5.6.2-1ubuntu2.6
5.6.2-1ubuntu2.7
5.6.2-1ubuntu2.8
5.6.2-1ubuntu2.9
5.6.2-1ubuntu2.9+esm1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / ipsec-tools

Package

Name
ipsec-tools
Purl
pkg:deb/ubuntu/ipsec-tools@1:0.8.2+20140711-10build1?arch=source&distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:0.*

1:0.8.2+20140711-10
1:0.8.2+20140711-10build1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / isakmpd

Package

Name
isakmpd
Purl
pkg:deb/ubuntu/isakmpd@20041012-8?arch=source&distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

20041012-7.*

20041012-7.3ubuntu1

Other

20041012-8

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:18.04:LTS / libreswan

Package

Name
libreswan
Purl
pkg:deb/ubuntu/libreswan@3.23-4?arch=source&distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.20-7build1
3.21-2
3.22-1
3.22-2
3.22-3
3.22-4
3.23-1
3.23-4

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:FIPS-updates:18.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.6.2-1ubuntu2.fips.2.9+esm1?arch=source&distro=fips-updates/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.6.2-1ubuntu2.fips.2.5.1
5.6.2-1ubuntu2.fips.2.7.1
5.6.2-1ubuntu2.fips.2.7.2
5.6.2-1ubuntu2.fips.2.8.1
5.6.2-1ubuntu2.fips.2.9
5.6.2-1ubuntu2.fips.2.9+esm1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:FIPS:18.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.6.2-1ubuntu2.fips.2.5.1?arch=source&distro=fips/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.6.2-1ubuntu2.fips.2.4.2
5.6.2-1ubuntu2.fips.2.5.1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / isakmpd

Package

Name
isakmpd
Purl
pkg:deb/ubuntu/isakmpd@20041012-8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

Other

20041012-8

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / libreswan

Package

Name
libreswan
Purl
pkg:deb/ubuntu/libreswan@3.29-2build1?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.29-2
3.29-2build1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.8.2-1ubuntu3.6?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.7.2-1ubuntu3
5.8.1-1ubuntu1
5.8.2-1ubuntu1
5.8.2-1ubuntu2
5.8.2-1ubuntu3
5.8.2-1ubuntu3.1
5.8.2-1ubuntu3.2
5.8.2-1ubuntu3.3
5.8.2-1ubuntu3.4
5.8.2-1ubuntu3.5
5.8.2-1ubuntu3.6

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:FIPS-updates:20.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.8.2-1ubuntu3.fips.3.6?arch=source&distro=fips-updates/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.2-1ubuntu3.fips.3.1.2
5.8.2-1ubuntu3.fips.3.3.1
5.8.2-1ubuntu3.fips.3.4.1
5.8.2-1ubuntu3.fips.3.5
5.8.2-1ubuntu3.fips.3.6

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:FIPS:20.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.8.2-1ubuntu3.fips.3.1.2?arch=source&distro=fips/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.2-1ubuntu3.fips.3.1.2

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:22.04:LTS / isakmpd

Package

Name
isakmpd
Purl
pkg:deb/ubuntu/isakmpd@20041012-10build1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

Other

20041012-10
20041012-10build1

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:22.04:LTS / libreswan

Package

Name
libreswan
Purl
pkg:deb/ubuntu/libreswan@3.32-3ubuntu3?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.32-3ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:22.04:LTS / strongswan

Package

Name
strongswan
Purl
pkg:deb/ubuntu/strongswan@5.9.5-2ubuntu2.3?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.9.1-1ubuntu3
5.9.1-1ubuntu3.1
5.9.4-1ubuntu1
5.9.4-1ubuntu2
5.9.4-1ubuntu3
5.9.4-1ubuntu4
5.9.5-2ubuntu1
5.9.5-2ubuntu2
5.9.5-2ubuntu2.1
5.9.5-2ubuntu2.2
5.9.5-2ubuntu2.3

Ecosystem specific 

{
    "ubuntu_priority": "low"
}