CVE-2018-5389 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-5389 Interim 1 42 2023-09-13T00:28:57Z current 2021-05-30T14:09:31Z 2023-09-13T00:28:57Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-5389 The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SUSE Linux Enterprise Module for Package Hub 15 SP1 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan strongswan-doc strongswan-hmac strongswan-ipsec strongswan-libs0 strongswan-nm strongswan as a component of SUSE CaaS Platform 4.5 strongswan as a component of SUSE Enterprise Storage 7 strongswan as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS strongswan-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS strongswan-hmac as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS strongswan-ipsec as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS strongswan-libs0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS strongswan as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS strongswan-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS strongswan-hmac as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS strongswan-ipsec as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS strongswan-libs0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS strongswan as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS strongswan-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS strongswan-hmac as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS strongswan-ipsec as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS strongswan-libs0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS strongswan as a component of SUSE Linux Enterprise Module for Basesystem 15 strongswan-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 strongswan-hmac as a component of SUSE Linux Enterprise Module for Basesystem 15 strongswan-ipsec as a component of SUSE Linux Enterprise Module for Basesystem 15 strongswan-libs0 as a component of SUSE Linux Enterprise Module for Basesystem 15 strongswan as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-hmac as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-ipsec as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan-libs0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 strongswan as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-hmac as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-ipsec as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-libs0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 strongswan-nm as a component of SUSE Linux Enterprise Module for Package Hub 15 strongswan as a component of SUSE Linux Enterprise Module for Package Hub 15 strongswan-nm as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 strongswan as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 strongswan-nm as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 strongswan as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 strongswan-nm as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 strongswan as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 strongswan as a component of SUSE Linux Enterprise Real Time 15 SP2 strongswan-doc as a component of SUSE Linux Enterprise Real Time 15 SP2 strongswan-hmac as a component of SUSE Linux Enterprise Real Time 15 SP2 strongswan-ipsec as a component of SUSE Linux Enterprise Real Time 15 SP2 strongswan-libs0 as a component of SUSE Linux Enterprise Real Time 15 SP2 strongswan as a component of SUSE Linux Enterprise Server 15 SP2-LTSS strongswan-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS strongswan-hmac as a component of SUSE Linux Enterprise Server 15 SP2-LTSS strongswan-ipsec as a component of SUSE Linux Enterprise Server 15 SP2-LTSS strongswan-libs0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS strongswan as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 strongswan as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 strongswan as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 strongswan-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 strongswan-hmac as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 strongswan-ipsec as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 strongswan-libs0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 strongswan-nm as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 strongswan as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 strongswan-nm as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 strongswan as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 strongswan as a component of SUSE Manager Proxy 4.1 strongswan as a component of SUSE Manager Retail Branch Server 4.1 strongswan as a component of SUSE Manager Server 4.1 The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network. CVE-2018-5389 SUSE CaaS Platform 4.5:strongswan SUSE Enterprise Storage 7:strongswan SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:strongswan SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:strongswan-doc SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:strongswan-hmac SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:strongswan-ipsec SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:strongswan-libs0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:strongswan SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:strongswan-doc SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:strongswan-hmac SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:strongswan-ipsec SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:strongswan-libs0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:strongswan SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:strongswan-doc SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:strongswan-hmac SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:strongswan-ipsec SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:strongswan-libs0 SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-doc SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-hmac SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-ipsec SUSE Linux Enterprise Module for Basesystem 15 SP3:strongswan-libs0 SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-doc SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-hmac SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-ipsec SUSE Linux Enterprise Module for Basesystem 15 SP4:strongswan-libs0 SUSE Linux Enterprise Module for Basesystem 15:strongswan SUSE Linux Enterprise Module for Basesystem 15:strongswan-doc SUSE Linux Enterprise Module for Basesystem 15:strongswan-hmac SUSE Linux Enterprise Module for Basesystem 15:strongswan-ipsec SUSE Linux Enterprise Module for Basesystem 15:strongswan-libs0 SUSE Linux Enterprise Module for Package Hub 15 SP1:strongswan SUSE Linux Enterprise Module for Package Hub 15 SP1:strongswan-nm SUSE Linux Enterprise Module for Package Hub 15 SP3:strongswan SUSE Linux Enterprise Module for Package Hub 15 SP3:strongswan-nm SUSE Linux Enterprise Module for Package Hub 15 SP4:strongswan SUSE Linux Enterprise Module for Package Hub 15 SP4:strongswan-nm SUSE Linux Enterprise Module for Package Hub 15:strongswan SUSE Linux Enterprise Module for Package Hub 15:strongswan-nm SUSE Linux Enterprise Real Time 15 SP2:strongswan SUSE Linux Enterprise Real Time 15 SP2:strongswan-doc SUSE Linux Enterprise Real Time 15 SP2:strongswan-hmac SUSE Linux Enterprise Real Time 15 SP2:strongswan-ipsec SUSE Linux Enterprise Real Time 15 SP2:strongswan-libs0 SUSE Linux Enterprise Server 15 SP2-LTSS:strongswan SUSE Linux Enterprise Server 15 SP2-LTSS:strongswan-doc SUSE Linux Enterprise Server 15 SP2-LTSS:strongswan-hmac SUSE Linux Enterprise Server 15 SP2-LTSS:strongswan-ipsec SUSE Linux Enterprise Server 15 SP2-LTSS:strongswan-libs0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:strongswan SUSE Linux Enterprise Server Business Critical Linux 15 SP2:strongswan SUSE Linux Enterprise Server for SAP Applications 15 SP2:strongswan SUSE Linux Enterprise Server for SAP Applications 15 SP2:strongswan-doc SUSE Linux Enterprise Server for SAP Applications 15 SP2:strongswan-hmac SUSE Linux Enterprise Server for SAP Applications 15 SP2:strongswan-ipsec SUSE Linux Enterprise Server for SAP Applications 15 SP2:strongswan-libs0 SUSE Linux Enterprise Workstation Extension 15 SP3:strongswan SUSE Linux Enterprise Workstation Extension 15 SP3:strongswan-nm SUSE Linux Enterprise Workstation Extension 15 SP4:strongswan SUSE Linux Enterprise Workstation Extension 15 SP4:strongswan-nm SUSE Manager Proxy 4.1:strongswan SUSE Manager Retail Branch Server 4.1:strongswan SUSE Manager Server 4.1:strongswan moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H