PT-2018-16941 · Ietf+1 · Internet Key Exchange+1

Dennis Felsch + 2 · Published 2018-09-06 · Updated 2024-06-24 · CVE-2018-5389

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Key Exchange (IKE) version 1

Description The Internet Key Exchange v1 main mode is susceptible to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is known that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This issue could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2018-5389

Affected Products

Debian

Internet Key Exchange

References · 16

• 🔥 https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-5389 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-5389 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-5389 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-5389 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-5389 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-5389 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-5389 · Vendor Advisory
• https://usenix.org/conference/usenixsecurity18/presentation/felsch · Note
• https://my.f5.com/manage/s/article/K42378447 · Note
• https://t.me/cvenotify/84223 · Telegram Post
• https://t.me/cvenotify/84238 · Telegram Post
• https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key · Note
• https://usenix.org/sites/default/files/conference/protected-files/security18_slides_felsch.pdf · Note
• https://kb.cert.org/vuls/id/857035 · Note