Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0423-1

Опубликовано: 12 фев. 2018
Источник: suse-cvrf

Описание

Security update for ipsec-tools

This update for ipsec-tools fixes one issue.

This security issue was fixed:

  • CVE-2016-10396: The racoon daemon contained a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments that allowed a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order (bsc#1047443).

Список пакетов

SUSE Linux Enterprise Server 11 SP4
ipsec-tools-0.7.3-1.38.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
ipsec-tools-0.7.3-1.38.3.1

Ссылки

Описание

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:ipsec-tools-0.7.3-1.38.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:ipsec-tools-0.7.3-1.38.3.1
Ссылки
Уязвимость SUSE-SU-2018:0423-1