Astaro Security Linux ISAKMP IKE Traffic Denial of Service Vulnerability

Bugtraq ID:	15666
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 30 2005 12:00AM
Updated:	Nov 30 2005 12:00AM
Credit:	This issue was reported by the vendor.
Vulnerable:	Astaro Security Linux 6.1 01 + OpenSSL Project OpenSSL 0.9.8 a + OpenSSL Project OpenSSL 0.9.8 + OpenSSL Project OpenSSL 0.9.7 h + OpenSSL Project OpenSSL 0.9.7 g + OpenSSL Project OpenSSL 0.9.7 f + OpenSSL Project OpenSSL 0.9.7 e + OpenSSL Project OpenSSL 0.9.7 d + OpenSSL Project OpenSSL 0.9.7 c + OpenSSL Project OpenSSL 0.9.7 beta3 + OpenSSL Project OpenSSL 0.9.7 beta2 + OpenSSL Project OpenSSL 0.9.7 beta1 + OpenSSL Project OpenSSL 0.9.7 b + OpenSSL Project OpenSSL 0.9.7 a + OpenSSL Project OpenSSL 0.9.7 + OpenSSL Project OpenSSL 0.9.6 m + OpenSSL Project OpenSSL 0.9.6 l + OpenSSL Project OpenSSL 0.9.6 k + OpenSSL Project OpenSSL 0.9.6 j + OpenSSL Project OpenSSL 0.9.6 i + OpenSSL Project OpenSSL 0.9.6 h + OpenSSL Project OpenSSL 0.9.6 g + OpenSSL Project OpenSSL 0.9.6 f + OpenSSL Project OpenSSL 0.9.6 e + OpenSSL Project OpenSSL 0.9.6 d + OpenSSL Project OpenSSL 0.9.6 c + OpenSSL Project OpenSSL 0.9.6 b-36.8 + OpenSSL Project OpenSSL 0.9.6 b + OpenSSL Project OpenSSL 0.9.6 a + OpenSSL Project OpenSSL 0.9.6 + OpenSSL Project OpenSSL 0.9.5 a + OpenSSL Project OpenSSL 0.9.5 + OpenSSL Project OpenSSL 0.9.4 + OpenSSL Project OpenSSL 0.9.3 + OpenSSL Project OpenSSL 0.9.2 b + OpenSSL Project OpenSSL 0.9.1 c Astaro Security Linux 6.0 02 Astaro Security Linux 6.0 01
Not Vulnerable:	Astaro Security Linux 6.102

Astaro Security Linux ISAKMP IKE Traffic Denial of Service Vulnerability

Astaro Security Linux is prone to a denial of service when handling malformed IKE traffic.

It is conjectured that the issue can occur if a packet with a malformed payload is sent during an IKE exchange causing the daemon to crash.

Astaro Security Linux ISAKMP IKE Traffic Denial of Service Vulnerability

This issue can be reproduced using the PROTOS ISAKMP Test Suite.

Astaro Security Linux ISAKMP IKE Traffic Denial of Service Vulnerability

Solution:
The vendor has released an update (Up2Date 6.102) to address this issue. Please see references for more information.

Astaro Security Linux ISAKMP IKE Traffic Denial of Service Vulnerability

References:

• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)
  
• Up2Date 6.102 (Astaro Security Linux)