{"id":"CVE-2021-45079","aliases":["ALPINE-CVE-2021-45079","AZL-8473","DEBIAN-CVE-2021-45079","DLA-2909-1","DSA-5056-1","EUVD-2021-31872","GHSA-8x8f-8g3r-h75g","OESA-2022-1525","OESA-2022-2068","SUSE-SU-2022:0202-1","SUSE-SU-2022:0211-1","SUSE-SU-2022:0492-1","SUSE-SU-2022:14887-1","UBUNTU-CVE-2021-45079","USN-5250-1","USN-5250-2","openSUSE-SU-2022:0492-1","openSUSE-SU-2024:11808-1"],"status":"published","title":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early...","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02761,"percentile":0.86458,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287","CWE-476"],"published":"2022-01-24T00:00:00Z","modified":"2026-10-24T10:30:20Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"strongswan","fixed_in":["5.9.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"strongswan","fixed_in":["5.9.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"strongswan","fixed_in":["5.9.1-r4"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"strongswan","fixed_in":["5.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"strongswan","fixed_in":["5.5.1-4+deb9u6"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"strongswan","fixed_in":["5.7.2-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"strongswan","fixed_in":["5.9.1-1+deb11u2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","fixed_in":["5.7.2-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"strongswan","fixed_in":["5.7.2-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"strongswan","fixed_in":["5.7.2-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"strongswan","fixed_in":["5.7.2-12.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"strongswan","fixed_in":["5.1.3-26.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"strongswan","fixed_in":["5.8.2-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","fixed_in":["5.1.2-0ubuntu2.11+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.8+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.fips.3.8.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.fips.2.8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.fips.3.4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","fixed_in":["5.9.4-1ubuntu4"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"strongswan","fixed_in":["5.8.2-11.24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"strongswan","fixed_in":["5.9.5-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"5.9.1-r4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-4+deb9u6"}]}],"versions":["5.5.1-4","5.5.1-4+deb9u1","5.5.1-4+deb9u2","5.5.1-4+deb9u3","5.5.1-4+deb9u4","5.5.1-4+deb9u5"]},{"source":"osv","ecosystem":"Debian:10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-1+deb10u2"}]}],"versions":["5.7.2-1","5.7.2-1+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1+deb11u2"}]}],"versions":["5.9.1-1","5.9.1-1+deb11u1"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-12.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-26.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-6.36.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-6.36.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.11+esm2"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11","5.1.2-0ubuntu2.11+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm2"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.fips.3.8.3"}]}],"versions":["5.3.5-1ubuntu3.fips.3.4.1","5.3.5-1ubuntu3.fips.3.4.2","5.3.5-1ubuntu3.fips.3.8.1","5.3.5-1ubuntu3.fips.3.8.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.5-1ubuntu3.fips.3.1","5.3.5-1ubuntu3.fips.3.2","5.3.5-1ubuntu3.fips.3.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.8"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.fips.2.8.1"}]}],"versions":["5.6.2-1ubuntu2.fips.2.5.1","5.6.2-1ubuntu2.fips.2.7.1","5.6.2-1ubuntu2.fips.2.7.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.4.2","5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.4"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.fips.3.4.1"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2","5.8.2-1ubuntu3.fips.3.3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.4-1ubuntu4"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.8"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.4"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-0ubuntu2.11+esm2"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11","5.1.2-0ubuntu2.11+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm2"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-11.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-1.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"extra_packages_for_enterprise_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-%28cve-2021-45079%29.html","tags":["x_refsource_MISC","x_transferred","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45079","tags":["web","advisory"]},{"url":"https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-(cve-2021-45079).html","tags":["report"]},{"url":"https://github.com/advisories/GHSA-8x8f-8g3r-h75g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-45079","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-45079","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1525","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2068","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220202-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194471","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45079","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220211-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220492-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214887-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1107874","tags":["report"]},{"url":"https://bugzilla.suse.com/1109845","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17540","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-45079","tags":["report"]},{"url":"https://github.com/strongswan/strongswan/releases/tag/5.9.5","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5250-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5250-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45079","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PDDGV75VWTCAFSBICC2NAFQ3EN5G6NAI/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-45079","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-31T07:15:52Z","modified":"2024-08-04T04:32:13.673Z","updated_at":"2026-11-02T14:33:02.580561Z"}],"euvd":[{"id":"EUVD-2021-31872","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-31T07:15:52Z","modified":"2024-08-04T04:32:13Z","updated_at":"2026-11-03T03:08:28.023592Z"}],"ghsa":[{"id":"GHSA-8x8f-8g3r-h75g","title":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early...","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-02-08T00:00:47Z","modified":"2023-01-27T05:00:34Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:41:42.686985Z"}],"nvd":[{"id":"CVE-2021-45079","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-31T08:15:07.307Z","modified":"2026-06-17T04:13:08.283Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:04.178977Z"}],"osv":[{"id":"ALPINE-CVE-2021-45079","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-31T08:15:07.307Z","modified":"2026-10-23T17:17:56.229129645Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-8473","title":"CVE-2021-45079 affecting package strongswan for versions less than 5.9.5-1","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-31T08:15:07Z","modified":"2026-04-21T04:34:51.506511Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:10.335477Z"},{"id":"CVE-2021-45079","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-31T08:15:07.307Z","modified":"2026-10-24T10:30:20.529663499Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:21.877444Z"},{"id":"DEBIAN-CVE-2021-45079","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-31T08:15:07.307Z","modified":"2026-10-23T18:04:00.751871638Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2022-1525","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\r\n\r\nIn strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.(CVE-2021-45079)","status":"published","published":"2022-02-11T11:04:48Z","modified":"2026-08-18T01:16:22.481728485Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2068","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\r\n\r\nIn strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.(CVE-2021-45079)","status":"published","published":"2022-11-11T11:05:23Z","modified":"2026-08-18T01:17:21.53547983Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2021-45079","description":"In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.","status":"published","published":"2022-01-24T13:00:00Z","modified":"2026-10-05T19:19:56.435222057Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"DLA-2909-1","title":"strongswan - security update","status":"published","published":"2022-02-03T00:00:00Z","modified":"2026-03-09T01:22:17.510153Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5056-1","title":"strongswan - security update","status":"published","published":"2022-01-24T00:00:00Z","modified":"2026-03-09T02:09:41.141887Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2022:0492-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)\n","status":"published","published":"2022-02-18T09:33:22Z","modified":"2025-05-07T18:13:24.68678Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11808-1","title":"strongswan-5.9.5-1.1 on GA media","description":"These are all security issues fixed in the strongswan-5.9.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:33.14675Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:0202-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)\n","status":"published","published":"2022-01-26T12:52:41Z","modified":"2026-02-04T04:05:03.416618Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0211-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)\n","status":"published","published":"2022-01-27T13:38:30Z","modified":"2026-02-04T03:26:05.53877Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0492-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)\n","status":"published","published":"2022-02-18T09:34:08Z","modified":"2026-02-04T02:44:49.425908Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:14887-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\t  \n- CVE-2018-16151: Fixed flaws in gmp plugin that could lead to authorization bypass. (bsc#1107874)\n- CVE-2018-16152: Fixed flaws in gmp plugin that could lead to authorization bypass. (bsc#1107874)\n- CVE-2018-17540: Fixed insufficient input validation in gmp plugin. (bsc#1109845)\n- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)\n","status":"published","published":"2022-02-18T09:39:04Z","modified":"2026-02-04T04:07:12.854467Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5250-1","title":"strongswan vulnerability","description":"Zhuowei Zhang discovered that stringSwan incorrectly handled EAP\nauthentication. A remote attacker could use this issue to cause strongSwan\nto crash, resulting in a denial of service, or possibly bypass client and\nserver authentication.\n","status":"published","published":"2022-01-24T17:29:23Z","modified":"2026-04-27T15:36:58.613035Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5250-2","title":"strongswan vulnerability","description":"USN-5250-1 fixed a vulnerability in strongSwan. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Zhuowei Zhang discovered that stringSwan incorrectly handled EAP\n authentication. A remote attacker could use this issue to cause strongSwan\n to crash, resulting in a denial of service, or possibly bypass client and\n server authentication.\n","status":"published","published":"2022-01-24T19:07:24Z","modified":"2026-06-29T13:49:35.449760967Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}