Unscored USN-2811-1 1 CVE

strongswan vulnerability

Published Nov 16, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the strongSwan eap-mschapv2 plugin incorrectly
handled state. A remote attacker could use this issue to bypass
authentication.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	strongswan	5.1.2-0ubuntu2.4

Vulnerabilities 1

Unscored —

CVE-2015-8023

The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x befo…

strongswan strongswan Debian Ubuntu

Nov 18, 2015

References

report
https://ubuntu.com/security/CVE-2015-8023