Описание
Security update for ipsec-tools
This update for ipsec-tools fixes one issue.
This security issue was fixed:
- CVE-2016-10396: The racoon daemon contained a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments that allowed a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order (bsc#1047443).
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.3
ipsec-tools-0.8.0-14.3.1
Ссылки
- E-Mail link for openSUSE-SU-2018:0434-1
- SUSE Security Ratings
Описание
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.
Затронутые продукты
openSUSE Leap 42.3:ipsec-tools-0.8.0-14.3.1
Ссылки
- CVE-2016-10396
- SUSE Bug 1047443