p PatchFirst

CVE-2018-5389

CVE-2018-5389

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.

CVSS 5.9 · Medium · EPSS 3.0%

Published
Updated

Stack: system

Affected products and versions

  • strongswan

    Versions
    • 5.5.1: Affected

    No fix published

  • libreswan Debian:12

    Versions
    • 4.10-2
    • 4.10-2+deb12u1
    • 4.11-1
    • 4.12-1
    • 4.12-2
    • 4.12-3
    • 4.14-1
    • 4.14-1.1
    • 4.15-1
    • 5.0~rc2-1
    • 5.0~rc2-2
    • 5.2-1
    • 5.2-2
    • 5.2-2.1
    • 5.2-2.2
    • 5.2-2.3
    • 5.2-2.4
    • 5.2-2.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Debian:13

    Versions
    • 5.2-2.2
    • 5.2-2.3
    • 5.2-2.4
    • 5.2-2.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Debian:14

    Versions
    • 5.2-2.2
    • 5.2-2.3
    • 5.2-2.4
    • 5.2-2.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Debian:12

    Versions
    • 5.9.11-1
    • 5.9.11-2
    • 5.9.12-1
    • 5.9.13-1
    • 5.9.13-2
    • 5.9.8-5
    • 5.9.8-5+deb12u1
    • 5.9.8-5+deb12u2
    • 5.9.8-5+deb12u3
    • 5.9.8-5+deb12u4
    • 5.9.8-5+deb12u5
    • 6.0.0-1
    • 6.0.0-2
    • 6.0.1-1
    • 6.0.1-2
    • 6.0.1-3
    • 6.0.1-4
    • 6.0.1-5
    • 6.0.1-6
    • 6.0.2-1
    • 6.0.3-1
    • 6.0.4-1
    • 6.0.5-1
    • 6.0.6-1
    • 6.0.7-1
    • 6.1.0-1
    • 6.1.0-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Debian:13

    Versions
    • 6.0.1-6
    • 6.0.1-6+deb13u1
    • 6.0.1-6+deb13u2
    • 6.0.1-6+deb13u4
    • 6.0.1-6+deb13u5
    • 6.0.1-6+deb13u6
    • 6.0.1-6+deb13u7
    • 6.0.2-1
    • 6.0.3-1
    • 6.0.4-1
    • 6.0.5-1
    • 6.0.6-1
    • 6.0.7-1
    • 6.1.0-1
    • 6.1.0-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Debian:14

    Versions
    • 6.0.1-6
    • 6.0.2-1
    • 6.0.3-1
    • 6.0.4-1
    • 6.0.5-1
    • 6.0.6-1
    • 6.0.7-1
    • 6.1.0-1
    • 6.1.0-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:14.04:LTS

    Versions
    • 4.6.4-9
    • 5.1.0-2
    • 5.1.0-3
    • 5.1.1-0ubuntu1
    • 5.1.1-0ubuntu2
    • 5.1.1-0ubuntu3
    • 5.1.1-0ubuntu4
    • 5.1.1-0ubuntu5
    • 5.1.1-0ubuntu7
    • 5.1.1-0ubuntu14
    • 5.1.1-0ubuntu17
    • 5.1.2~dr3+git20130120-0ubuntu2
    • 5.1.2~dr3+git20130120-0ubuntu3
    • 5.1.2~rc1-0ubuntu3
    • 5.1.2~rc1-0ubuntu4
    • 5.1.2~rc2-0ubuntu2
    • 5.1.2-0ubuntu1
    • 5.1.2-0ubuntu2
    • 5.1.2-0ubuntu2.2
    • 5.1.2-0ubuntu2.3
    • 5.1.2-0ubuntu2.4
    • 5.1.2-0ubuntu2.5
    • 5.1.2-0ubuntu2.6
    • 5.1.2-0ubuntu2.7
    • 5.1.2-0ubuntu2.8
    • 5.1.2-0ubuntu2.10
    • 5.1.2-0ubuntu2.11
    • 5.1.2-0ubuntu2.11+esm1
    • 5.1.2-0ubuntu2.11+esm2
    • 5.1.2-0ubuntu2.11+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:16.04:LTS

    Versions
    • 5.1.2-0ubuntu6
    • 5.1.2-0ubuntu7
    • 5.1.2-0ubuntu8
    • 5.3.5-1ubuntu1
    • 5.3.5-1ubuntu2
    • 5.3.5-1ubuntu3
    • 5.3.5-1ubuntu3.1
    • 5.3.5-1ubuntu3.2
    • 5.3.5-1ubuntu3.3
    • 5.3.5-1ubuntu3.4
    • 5.3.5-1ubuntu3.5
    • 5.3.5-1ubuntu3.7
    • 5.3.5-1ubuntu3.8
    • 5.3.5-1ubuntu3.8+esm1
    • 5.3.5-1ubuntu3.8+esm2
    • 5.3.5-1ubuntu3.8+esm3
    • 5.3.5-1ubuntu3.8+esm4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipsec-tools Ubuntu:16.04:LTS

    Versions
    • 1:0.8.2+20140711-4
    • 1:0.8.2+20140711-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • isakmpd Ubuntu:16.04:LTS

    Versions
    • 20041012-7.2ubuntu1
    • 20041012-7.2ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:FIPS-updates:16.04:LTS

    Versions
    • 5.3.5-1ubuntu3.fips.3.4.1
    • 5.3.5-1ubuntu3.fips.3.4.2
    • 5.3.5-1ubuntu3.fips.3.8.1
    • 5.3.5-1ubuntu3.fips.3.8.2
    • 5.3.5-1ubuntu3.fips.3.8.3
    • 5.3.5-1ubuntu3.fips.3.8.6
    • 5.3.5-1ubuntu3.fips.3.8.7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:FIPS:16.04:LTS

    Versions
    • 5.3.5-1ubuntu3.fips.3.1
    • 5.3.5-1ubuntu3.fips.3.2
    • 5.3.5-1ubuntu3.fips.3.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:18.04:LTS

    Versions
    • 5.5.1-4ubuntu2
    • 5.5.1-4ubuntu3
    • 5.6.1-2ubuntu1
    • 5.6.1-2ubuntu2
    • 5.6.1-2ubuntu3
    • 5.6.1-2ubuntu4
    • 5.6.2-1ubuntu2
    • 5.6.2-1ubuntu2.2
    • 5.6.2-1ubuntu2.3
    • 5.6.2-1ubuntu2.4
    • 5.6.2-1ubuntu2.5
    • 5.6.2-1ubuntu2.6
    • 5.6.2-1ubuntu2.7
    • 5.6.2-1ubuntu2.8
    • 5.6.2-1ubuntu2.9
    • 5.6.2-1ubuntu2.9+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipsec-tools Ubuntu:18.04:LTS

    Versions
    • 1:0.8.2+20140711-10
    • 1:0.8.2+20140711-10build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • isakmpd Ubuntu:18.04:LTS

    Versions
    • 20041012-7.3ubuntu1
    • 20041012-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Ubuntu:18.04:LTS

    Versions
    • 3.20-7build1
    • 3.21-2
    • 3.22-1
    • 3.22-2
    • 3.22-3
    • 3.22-4
    • 3.23-1
    • 3.23-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:FIPS-updates:18.04:LTS

    Versions
    • 5.6.2-1ubuntu2.fips.2.5.1
    • 5.6.2-1ubuntu2.fips.2.7.1
    • 5.6.2-1ubuntu2.fips.2.7.2
    • 5.6.2-1ubuntu2.fips.2.8.1
    • 5.6.2-1ubuntu2.fips.2.9
    • 5.6.2-1ubuntu2.fips.2.9+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:FIPS:18.04:LTS

    Versions
    • 5.6.2-1ubuntu2.fips.2.4.2
    • 5.6.2-1ubuntu2.fips.2.5.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:20.04:LTS

    Versions
    • 5.7.2-1ubuntu3
    • 5.8.1-1ubuntu1
    • 5.8.2-1ubuntu1
    • 5.8.2-1ubuntu2
    • 5.8.2-1ubuntu3
    • 5.8.2-1ubuntu3.1
    • 5.8.2-1ubuntu3.2
    • 5.8.2-1ubuntu3.3
    • 5.8.2-1ubuntu3.4
    • 5.8.2-1ubuntu3.5
    • 5.8.2-1ubuntu3.6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • isakmpd Ubuntu:20.04:LTS

    Versions
    • 20041012-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libreswan Ubuntu:20.04:LTS

    Versions
    • 3.29-2
    • 3.29-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:FIPS-updates:20.04:LTS

    Versions
    • 5.8.2-1ubuntu3.fips.3.1.2
    • 5.8.2-1ubuntu3.fips.3.3.1
    • 5.8.2-1ubuntu3.fips.3.4.1
    • 5.8.2-1ubuntu3.fips.3.5
    • 5.8.2-1ubuntu3.fips.3.6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • strongswan Ubuntu:Pro:FIPS:20.04:LTS

    Versions
    • 5.8.2-1ubuntu3.fips.3.1.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →