The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of     operation (CVE-2018-5389)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of     operation (CVE-2018-5389)

  - The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows     remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x     value in a KE payload in a IKE packet. (CVE-2015-3240)

  - programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows     remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the     original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan     vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-     required security updates, with separate CVE IDs assigned to each. (CVE-2016-5361)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of     operation (CVE-2018-5389)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of     operation (CVE-2018-5389)

  - The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows     remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x     value in a KE payload in a IKE packet. (CVE-2015-3240)

  - programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows     remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the     original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan     vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-     required security updates, with separate CVE IDs assigned to each. (CVE-2016-5361)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K42378447 advisory.

  - The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing     a key pair across different versions and modes of IKE could lead to cross-protocol authentication     bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or     brute force attacks. For the main mode, however, only an online attack against PSK authentication was     thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or     enable the impersonation of a victim host or network. (CVE-2018-5389)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198973	RHEL 8 : openswan (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198929	RHEL 5 : openswan (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198921	RHEL 7 : openswan (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198920	RHEL 6 : openswan (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
184251	F5 Networks BIG-IP : IPsec IKEv1 vulnerability (K42378447)	Nessus	F5 Networks Local Security Checks	medium

Detections

Analytics

CVE-2018-5389

medium

Tenable Plugins

medium

medium

medium

medium

medium