CVE catalog

CVE-2018-5389

libreswan: CVE-2018-5389

Severity: Low
Published: Sep 6, 2018, 9:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 3.04% · Oct 25, 2026

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libreswan	sid	`5.2-2.5`	vulnerable
Debian	libreswan	forky	`5.2-2.5`	vulnerable
Debian	libreswan	trixie	`5.2-2.2`	vulnerable
Debian	libreswan	bookworm	`4.10-2+deb12u1`	vulnerable
Debian	strongswan	sid	`6.1.0-2`	vulnerable
Debian	strongswan	forky	`6.1.0-2`	vulnerable
Debian	strongswan	trixie	`6.0.1-6+deb13u6`	vulnerable
Debian	strongswan	trixie-security	`6.0.1-6+deb13u7`	vulnerable
Debian	strongswan	bookworm	`5.9.8-5+deb12u5`	vulnerable
Debian	strongswan	bookworm-security	`5.9.8-5+deb12u5`	vulnerable
Ubuntu	strongswan	pro	`5.8.2-1ubuntu3.fips.3.1.2`	vulnerable
Ubuntu	ipsec-tools	16.04	`1:0.8.2+20140711-4`	vulnerable
Ubuntu	ipsec-tools	16.04	`1:0.8.2+20140711-5`	vulnerable
Ubuntu	isakmpd	16.04	`20041012-7.2ubuntu1`	vulnerable
Ubuntu	isakmpd	16.04	`20041012-7.2ubuntu2`	vulnerable
Ubuntu	ipsec-tools	18.04	`1:0.8.2+20140711-10`	vulnerable
Ubuntu	ipsec-tools	18.04	`1:0.8.2+20140711-10build1`	vulnerable
Ubuntu	isakmpd	18.04	`20041012-7.3ubuntu1`	vulnerable
Ubuntu	isakmpd	18.04	`20041012-8`	vulnerable
Ubuntu	libreswan	18.04	`3.20-7build1`	vulnerable
Ubuntu	libreswan	18.04	`3.21-2`	vulnerable
Ubuntu	libreswan	18.04	`3.22-1`	vulnerable
Ubuntu	libreswan	18.04	`3.22-2`	vulnerable
Ubuntu	libreswan	18.04	`3.22-3`	vulnerable
Ubuntu	libreswan	18.04	`3.22-4`	vulnerable
Ubuntu	libreswan	18.04	`3.23-1`	vulnerable
Ubuntu	libreswan	18.04	`3.23-4`	vulnerable
Ubuntu	strongswan	20.04	`5.7.2-1ubuntu3`	vulnerable
Ubuntu	strongswan	20.04	`5.8.1-1ubuntu1`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu1`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu2`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.1`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.2`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.3`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.4`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.5`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.6`	vulnerable
Ubuntu	isakmpd	20.04	`20041012-8`	vulnerable
Ubuntu	libreswan	20.04	`3.29-2`	vulnerable
Ubuntu	libreswan	20.04	`3.29-2build1`	vulnerable
Ubuntu	isakmpd	22.04	`20041012-10`	vulnerable
Ubuntu	isakmpd	22.04	`20041012-10build1`	vulnerable
Ubuntu	libreswan	22.04	`3.32-3ubuntu3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.1-1ubuntu3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.1-1ubuntu3.1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu4`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.4`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.5`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.6`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.7`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.8`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libreswan	source	sid	`(unfixed)`	unimportant	Not reported	Not reported
Debian	libreswan	source	forky	`(unfixed)`	unimportant	Not reported	Not reported
Debian	libreswan	source	trixie	`(unfixed)`	unimportant	Not reported	Not reported
Debian	libreswan	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Debian	strongswan	source	sid	`(unfixed)`	unimportant	Not reported	Not reported
Debian	strongswan	source	forky	`(unfixed)`	unimportant	Not reported	Not reported
Debian	strongswan	source	trixie	`(unfixed)`	unimportant	Not reported	Not reported
Debian	strongswan	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[charon-cmd]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[charon-systemd]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[libcharon-extauth-plugins]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[libcharon-extra-plugins]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[libreswan]Unknown
Details (2)
- 4.10-2+deb12u1 · amd64 · bookworm
  Affected
  dsa · libreswan · debian · bookworm; dsa · libreswan · debian · 12
- 4.10-2+deb12u1 · arm64 · bookworm
  Affected
  dsa · libreswan · debian · bookworm; dsa · libreswan · debian · 12
[libstrongswan]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[libstrongswan-extra-plugins]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[libstrongswan-standard-plugins]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[strongswan]Unknown
Details (4)
- 5.9.8-5+deb12u5 · all · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · all · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · all · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · all · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[strongswan-charon]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[strongswan-libcharon]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[strongswan-nm]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[strongswan-pki]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[strongswan-starter]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
[strongswan-swanctl]Unknown
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Affected
  dsa · strongswan · debian · bookworm; dsa · strongswan · debian · 12

[Debian 13 (Trixie)]

[charon-cmd]Unknown
Source package: [strongswan]
Details (5)
- 6.0.1-6+deb13u6 · amd64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · amd64 · trixie-security · Historical version
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u7 · amd64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
[charon-systemd]Unknown
Source package: [strongswan]
Details (5)
- 6.0.1-6+deb13u6 · amd64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · amd64 · trixie-security · Historical version
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u7 · amd64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
[libcharon-extauth-plugins]Unknown
Source package: [strongswan]
Details (5)
- 6.0.1-6+deb13u6 · amd64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · amd64 · trixie-security · Historical version
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u7 · amd64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
[libcharon-extra-plugins]Unknown
Source package: [strongswan]
Details (5)
- 6.0.1-6+deb13u6 · amd64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · amd64 · trixie-security · Historical version
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u6 · arm64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
- 6.0.1-6+deb13u7 · amd64 · trixie-security
  Affected
  dsa · strongswan · debian · 13
[libreswan]Unknown
Details (2)
- 5.2-2.2 · amd64 · trixie
  Affected
  dsa · libreswan · debian · 13
- 5.2-2.2 · arm64 · trixie
  Affected
  dsa · libreswan · debian · 13

Next results

Observed: Oct 23, 2026, 5:37:18 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]