CVE-2014-2338
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by...
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
Exploit likelihood
What each source reports
NVD Score used
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Record
CVE-2014-2338- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Record
CVE-2014-2338- Updated
- 2026-11-02
EUVDEUVD-2014-2375 No score
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Record
EUVD-2014-2375- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-69p7-xxq6-hxwh No score
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by...
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Record
GHSA-69p7-xxq6-hxwh- Weakness
- CWE-287
- Updated
- 2026-11-02
OSV No score
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Record
CVE-2014-2338- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-2338 No score
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Record
DEBIAN-CVE-2014-2338- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10579-1 No score
strongswan-5.3.5-1.1 on GA media
These are all security issues fixed in the strongswan-5.3.5-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10579-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1227-1 No score
Security update for strongswan
This update fixes a NULL ptr dereference (DoS) via ID_DER_ASN1_DN ID payloads.
Security Issue reference:
* CVE-2014-2891
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2891>
- Record
SUSE-SU-2015:1227-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-2338 No score
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
- Record
UBUNTU-CVE-2014-2338- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
strongswanDebian:12 |
before 5.1.2-4 | 5.1.2-4 |
strongswanDebian:13 |
before 5.1.2-4 | 5.1.2-4 |
strongswanDebian:14 |
before 5.1.2-4 | 5.1.2-4 |
strongswanDebian:6.0 |
before 4.4.1-5.5, plus listed versions 4.4.1-5.14.4.1-5.24.4.1-5.34.4.1-5.4 |
4.4.1-5.5 |
strongswanDebian:7 |
before 4.5.2-1.5+deb7u3, plus listed versions 4.5.2-1.5+deb7u14.5.2-1.5+deb7u24.5.2-1.5+deb7u2~bpo60+14.5.2-1.5+deb7u3~bpo60+1 |
4.5.2-1.5+deb7u3 |
strongswanUbuntu:14.04:LTS |
before 5.1.2-0ubuntu2, plus listed versions 4.6.4-95.1.0-25.1.0-35.1.1-0ubuntu15.1.1-0ubuntu2 Show 12 moreShow less5.1.1-0ubuntu35.1.1-0ubuntu45.1.1-0ubuntu55.1.1-0ubuntu75.1.1-0ubuntu145.1.1-0ubuntu175.1.2~dr3+git20130120-0ubuntu25.1.2~dr3+git20130120-0ubuntu35.1.2~rc1-0ubuntu35.1.2~rc1-0ubuntu45.1.2~rc2-0ubuntu25.1.2-0ubuntu1 |
5.1.2-0ubuntu2 |
strongswanopenSUSE:Tumbleweed From an advisory covering 11 CVEs |
before 5.3.5-1.1 | 5.3.5-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2338 is a medium vulnerability (CVSS 6.4) in Strongswan, published April 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.38%, the 83rd percentile. Fixed in strongswan 5.1.2-4.
References
lists.opensuse.org/opensuse-updates/2014-05/msg00064.html
debian.org/security/2014/dsa-2903
secunia.com/advisories/57823
securityfocus.com/bid/66815
Show 26 moreShow less
strongswan.org/blog/2014/04/14/strongswan-authentication-bypass-vulnerability-%28cve-2014-2338%29.html
nvd.nist.gov/vuln/detail/CVE-2014-2338
github.com/advisories/GHSA-69p7-xxq6-hxwh
security-tracker.debian.org/tracker/CVE-2014-2338
suse.com/support/update/announcement/2015/suse-su-20151227-1
bugzilla.suse.com/815236
ubuntu.com/security/CVE-2014-2338
cve.org/CVERecord?id=CVE-2014-2338