| Package | Affected versions | Patched versions |
|---|---|---|
| strongswan | ≥ 5.9.7, ≤ 6.0.7 |
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free