GLSA 200905-03: IPSec Tools: Denial of Service

http://security.gentoo.org/

Severity:	normal
Title:	IPSec Tools: Denial of Service
Date:	05/24/2009
Bugs:	#267135
ID:	200905-03

Synopsis

Multiple errors in the IPSec Tools racoon daemon might allow remote attackers to cause a Denial of Service.

Background

The IPSec Tools are a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. They include racoon, an Internet Key Exchange daemon for automatically keying IPsec connections.

Affected packages

Package	Vulnerable	Unaffected	Architecture(s)
net-firewall/ipsec-tools	< 0.7.2	>= 0.7.2	All supported architectures

Description

The following vulnerabilities have been found in the racoon daemon as shipped with IPSec Tools:

Neil Kettle reported that racoon/isakmp_frag.c is prone to a null-pointer dereference (CVE-2009-1574).
Multiple memory leaks exist in (1) the eay_check_x509sign() function in racoon/crypto_openssl.c and (2) racoon/nattraversal.c (CVE-2009-1632).

Impact

A remote attacker could send specially crafted fragmented ISAKMP packets without a payload or exploit vectors related to X.509 certificate authentication and NAT traversal, possibly resulting in a crash of the racoon daemon.

Workaround

There is no known workaround at this time.

Resolution

All IPSec Tools users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-firewall/ipsec-tools-0.7.2"

References

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200905-03.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.