OpenBSD ISAKMPD Kernel Heap Buffer Overflow Local Denial Of Service Vulnerability
BID:11928
Info
OpenBSD ISAKMPD Kernel Heap Buffer Overflow Local Denial Of Service Vulnerability
| Bugtraq ID: | 11928 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 14 2004 12:00AM |
| Updated: | Dec 14 2004 12:00AM |
| Credit: | Stefan Miltchev disclosed this vulnerability to the vendor. |
| Vulnerable: |
OpenBSD OpenBSD 3.6 OpenBSD OpenBSD 3.5 OpenBSD OpenBSD 3.4 |
| Not Vulnerable: | |
Discussion
OpenBSD ISAKMPD Kernel Heap Buffer Overflow Local Denial Of Service Vulnerability
It is reported that OpenBSD's IPSEC implementation is susceptible to a kernel heap buffer overflow local denial of service vulnerability. This issue is reportedly only exploitable by local users when isakmpd(8) is running.
This issue allows attackers with local interactive access on computers running isakmpd(8) to cause kernel crashes, denying service to legitimate users. It is reported that this issue doesn't likely allow privilege escalation or code execution.
It should be noted that isakmpd(8) is not configured to run by default.
It is reported that OpenBSD's IPSEC implementation is susceptible to a kernel heap buffer overflow local denial of service vulnerability. This issue is reportedly only exploitable by local users when isakmpd(8) is running.
This issue allows attackers with local interactive access on computers running isakmpd(8) to cause kernel crashes, denying service to legitimate users. It is reported that this issue doesn't likely allow privilege escalation or code execution.
It should be noted that isakmpd(8) is not configured to run by default.
Exploit / POC
OpenBSD ISAKMPD Kernel Heap Buffer Overflow Local Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
OpenBSD ISAKMPD Kernel Heap Buffer Overflow Local Denial Of Service Vulnerability
Solution:
The vendor has made patches available for OpenBSD 3.4, 3.5, and 3.6. The OpenBSD CVS repository has had the fixes available since 10 December, 2004.
OpenBSD OpenBSD 3.5
OpenBSD OpenBSD 3.4
OpenBSD OpenBSD 3.6
Solution:
The vendor has made patches available for OpenBSD 3.4, 3.5, and 3.6. The OpenBSD CVS repository has had the fixes available since 10 December, 2004.
OpenBSD OpenBSD 3.5
-
OpenBSD 024_pfkey.patch
ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/3.5/common/024_pfkey.patch
OpenBSD OpenBSD 3.4
-
OpenBSD 035_pfkey.patch
ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/3.4/common/035_pfkey.patch
OpenBSD OpenBSD 3.6
-
OpenBSD 007_pfkey.patch
ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/3.6/common/007_pfkey.patch
References
OpenBSD ISAKMPD Kernel Heap Buffer Overflow Local Denial Of Service Vulnerability
References:
References:
- OpenBSD Errata Page (OpenBSD)
- OpenBSD Homepage (OpenBSD)
- PR #4025 - kernel panic (OpenBSD)