strongSwan IKE Request Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	35178
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-1957 CVE-2009-1958
Remote:	Yes
Local:	No
Published:	Jun 02 2009 12:00AM
Updated:	Mar 19 2015 08:09AM
Credit:	Andreas Steffen
Vulnerable:	SuSE SUSE Linux Enterprise Server 9 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE openSUSE 10.3 strongSwan strongSwan 4.3 strongSwan strongSwan 4.2.14 strongSwan strongSwan 4.2.13 strongSwan strongSwan 4.2.7 strongSwan strongSwan 4.2.6 strongSwan strongSwan 4.1 S.u.S.E. SUSE Linux Enterprise Server RT Solution 10 0 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	strongSwan strongSwan 4.3.1 strongSwan strongSwan 4.2.15

strongSwan IKE Request Multiple Remote Denial Of Service Vulnerabilities

strongSwan is prone to multiple remote denial-of-service vulnerabilities because it fail to properly handle certain IKE packets.

Attackers can exploit this issue to crash the IKEv2 charon daemon, denying access to legitimate users.

Versions prior to strongSwan 4.3.1 and 4.2.15 are vulnerable.

strongSwan IKE Request Multiple Remote Denial Of Service Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

strongSwan IKE Request Multiple Remote Denial Of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian strongswan_2.8.0+dfsg-1+etch2_arm.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_arm.deb

Debian Linux 5.0 ia-64

• Debian strongswan_4.2.4-5+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_ia64.deb

Debian Linux 4.0 powerpc

• Debian strongswan_2.8.0+dfsg-1+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_powerpc.deb

Debian Linux 5.0 alpha

• Debian strongswan_4.2.4-5+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_alpha.deb

Debian Linux 5.0 ia-32

• Debian strongswan_4.2.4-5+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_i386.deb

Debian Linux 5.0 s/390

• Debian strongswan_4.2.4-5+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_s390.deb

Debian Linux 5.0 mipsel

• Debian strongswan_4.2.4-5+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_mipsel.deb

Debian Linux 4.0 amd64

• Debian strongswan_2.8.0+dfsg-1+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_amd64.deb

Debian Linux 4.0 ia-32

• Debian strongswan_2.8.0+dfsg-1+etch2_i386.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_i386.deb

Debian Linux 5.0 hppa

• Debian strongswan_4.2.4-5+lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_hppa.deb

Debian Linux 4.0 hppa

• Debian strongswan_2.8.0+dfsg-1+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_hppa.deb

Debian Linux 4.0 sparc

• Debian strongswan_2.8.0+dfsg-1+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_sparc.deb

Debian Linux 4.0 s/390

• Debian strongswan_2.8.0+dfsg-1+etch2_s390.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_s390.deb

Debian Linux 5.0 arm

• Debian strongswan_4.2.4-5+lenny3_arm.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_arm.deb

Debian Linux 4.0 alpha

• Debian strongswan_2.8.0+dfsg-1+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_alpha.deb

Debian Linux 5.0 armel

• Debian strongswan_4.2.4-5+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_armel.deb

Debian Linux 4.0 mipsel

• Debian strongswan_2.8.0+dfsg-1+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_mipsel.deb

Debian Linux 5.0 amd64

• Debian strongswan_4.2.4-5+lenny3_amd64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_amd64.deb

Debian Linux 5.0 mips

• Debian strongswan_4.2.4-5+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_mips.deb

Debian Linux 5.0 powerpc

• Debian strongswan_4.2.4-5+lenny3_powerpc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_powerpc.deb

Debian Linux 4.0 ia-64

• Debian strongswan_2.8.0+dfsg-1+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_ia64.deb

Debian Linux 4.0 mips

• Debian strongswan_2.8.0+dfsg-1+etch2_mips.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_2 .8.0+dfsg-1+etch2_mips.deb

Debian Linux 5.0 sparc

• Debian strongswan_4.2.4-5+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/s/strongswan/strongswan_4 .2.4-5+lenny3_sparc.deb

strongSwan strongSwan 4.1

• strongSwan strongswan-4.3.1.tar.gz
  http://download.strongswan.org/strongswan-4.3.1.tar.gz

strongSwan strongSwan 4.2.13

• strongSwan strongswan-4.3.1.tar.gz
  http://download.strongswan.org/strongswan-4.3.1.tar.gz

strongSwan strongSwan 4.2.14

• strongSwan strongswan-4.3.1.tar.gz
  http://download.strongswan.org/strongswan-4.3.1.tar.gz

strongSwan strongSwan 4.2.6

• strongSwan strongswan-4.3.1.tar.gz
  http://download.strongswan.org/strongswan-4.3.1.tar.gz

strongSwan strongSwan 4.2.7

• strongSwan strongswan-4.3.1.tar.gz
  http://download.strongswan.org/strongswan-4.3.1.tar.gz

strongSwan strongSwan 4.3

• strongSwan strongswan-4.3.1.tar.gz
  http://download.strongswan.org/strongswan-4.3.1.tar.gz

strongSwan IKE Request Multiple Remote Denial Of Service Vulnerabilities

References:

• [strongSwan] ANNOUNCE: strongSwan 4.3.1 and 4.2.15 released (Andreas Steffen andreas.steffen at strongswan.org )
  
• Index of /patches/03_invalid_ike_state_patch (strongSwan)
  
• Index of /patches/04_swapped_ts_check_patch (strongSwan)
  
• strongSwan Homepage (strongSwan)