diff options
| author | Martin Willi <martin@revosec.ch> | 2014-02-20 16:08:43 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2014-04-14 13:29:49 +0200 |
| commit | 8503077175cd04f24cde25f663b0df9969f3b578 (patch) | |
| tree | 814df597a597c7155e4d24739b5f7ccd3e2321fa /src/libcharon/plugins/socket_default/socket_default_socket.h | |
| parent | abd7d3be9ca88168dbf7837ea906ed788e5a0e94 (diff) | |
| download | strongswan-8503077175cd04f24cde25f663b0df9969f3b578.tar.bz2 strongswan-8503077175cd04f24cde25f663b0df9969f3b578.tar.xz | |
ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAs
Prevents a responder peer to trick us into established state by starting
IKE_SA rekeying before the IKE_SA has been authenticated during IKE_AUTH.
Fixes CVE-2014-2338.
Diffstat (limited to 'src/libcharon/plugins/socket_default/socket_default_socket.h')
0 files changed, 0 insertions, 0 deletions