Openswan IKEv2 payloads Remote Denial Of Service Vulnerability
BID:65155
Info
Openswan IKEv2 payloads Remote Denial Of Service Vulnerability
| Bugtraq ID: | 65155 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-6466 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 27 2014 12:00AM |
| Updated: | Sep 08 2017 01:13PM |
| Credit: | Iustina Melinte |
| Vulnerable: |
Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Phoenix Contact FL MGUARD SMART2 VPN 8.5.1 Phoenix Contact FL MGUARD SMART2 VPN 8.0 Phoenix Contact FL MGUARD SMART2 8.5.1 Phoenix Contact FL MGUARD SMART2 8.0 Phoenix Contact FL MGUARD RS4004 TX/DTX VPN 8.5.1 Phoenix Contact FL MGUARD RS4004 TX/DTX VPN 8.0 Phoenix Contact FL MGUARD RS4004 TX/DTX 8.5.1 Phoenix Contact FL MGUARD RS4004 TX/DTX 8.0 Phoenix Contact FL MGUARD RS4000 TX/TX-P 8.5.1 Phoenix Contact FL MGUARD RS4000 TX/TX-P 8.0 Phoenix Contact FL MGUARD RS4000 TX/TX VPN-M 8.5.1 Phoenix Contact FL MGUARD RS4000 TX/TX VPN-M 8.0 Phoenix Contact FL MGUARD RS4000 TX/TX VPN 8.5.1 Phoenix Contact FL MGUARD RS4000 TX/TX VPN 8.0 Phoenix Contact FL MGUARD RS4000 TX/TX 8.5.1 Phoenix Contact FL MGUARD RS4000 TX/TX 8.0 Phoenix Contact FL MGUARD RS2005 TX VPN 8.5.1 Phoenix Contact FL MGUARD RS2005 TX VPN 8.0 Phoenix Contact FL MGUARD RS2000 TX/TX VPN 8.5.1 Phoenix Contact FL MGUARD RS2000 TX/TX VPN 8.0 Phoenix Contact FL MGUARD RS VPN ANALOG 8.5.1 Phoenix Contact FL MGUARD RS VPN ANALOG 8.0 Phoenix Contact FL MGUARD RS 8.5.1 Phoenix Contact FL MGUARD RS 8.0 Phoenix Contact FL MGUARD PCIE4000 VPN 8.5.1 Phoenix Contact FL MGUARD PCIE4000 VPN 8.0 Phoenix Contact FL MGUARD PCI4000 VPN 8.5.1 Phoenix Contact FL MGUARD PCI4000 VPN 8.0 Phoenix Contact FL MGUARD PCI4000 8.5.1 Phoenix Contact FL MGUARD PCI4000 8.0 Phoenix Contact FL MGUARD GT/GT VPN 8.5.1 Phoenix Contact FL MGUARD GT/GT VPN 8.0 Phoenix Contact FL MGUARD GT/GT 8.5.1 Phoenix Contact FL MGUARD GT/GT 8.0 Phoenix Contact FL MGUARD DELTA TX/TX VPN 8.5.1 Phoenix Contact FL MGUARD DELTA TX/TX VPN 8.0 Phoenix Contact FL MGUARD DELTA TX/TX 8.5.1 Phoenix Contact FL MGUARD DELTA TX/TX 8.0 Phoenix Contact FL MGUARD CENTERPORT 8.5.1 Phoenix Contact FL MGUARD CENTERPORT 8.0 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Openswan Openswan 2.6.38 Openswan Openswan 2.6.37 Openswan Openswan 2.6.34 Openswan Openswan 2.6.31 Openswan Openswan 2.6.30 Openswan Openswan 2.6.24 Openswan Openswan 2.6.23 Openswan Openswan 2.6.22 Openswan Openswan 2.6.21 Openswan Openswan 2.6.20 Openswan Openswan 2.6.19 Openswan Openswan 2.6.18 Openswan Openswan 2.6.17 Openswan Openswan 2.6.16 Openswan Openswan 2.6.15 Openswan Openswan 2.6.14 Openswan Openswan 2.6.2 Openswan Openswan 2.6.39 Openswan Openswan 2.6.36 Openswan Openswan 2.6.35 Openswan Openswan 2.6.33 Openswan Openswan 2.6.29 Openswan Openswan 2.6.28 Openswan Openswan 2.6.27 Openswan Openswan 2.6.26 Openswan Openswan 2.6.25 Openswan Openswan 2.6.13 Openswan Openswan 2.6.12 Openswan Openswan 2.6.11 Openswan Openswan 2.6.10 Openswan Openswan 2.6.09 Openswan Openswan 2.6.08 Openswan Openswan 2.6.07 Openswan Openswan 2.6.06 Openswan Openswan 2.6.05 Openswan Openswan 2.6.04 Openswan Openswan 2.6.03 Openswan Openswan 2.6.01 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 Avaya Aura Conferencing 7.0 Avaya Aura Application Server 5300 SIP Core 3.0 Avaya Aura Application Server 5300 SIP Core 2.0 |
| Not Vulnerable: |
Phoenix Contact FL MGUARD SMART2 VPN 8.5.2 Phoenix Contact FL MGUARD SMART2 8.5.2 Phoenix Contact FL MGUARD RS4004 TX/DTX VPN 8.5.2 Phoenix Contact FL MGUARD RS4004 TX/DTX 8.5.2 Phoenix Contact FL MGUARD RS4000 TX/TX-P 8.5.2 Phoenix Contact FL MGUARD RS4000 TX/TX VPN-M 8.5.2 Phoenix Contact FL MGUARD RS4000 TX/TX VPN 8.5.2 Phoenix Contact FL MGUARD RS4000 TX/TX 8.5.2 Phoenix Contact FL MGUARD RS2005 TX VPN 8.5.2 Phoenix Contact FL MGUARD RS2000 TX/TX VPN 8.5.2 Phoenix Contact FL MGUARD RS VPN ANALOG 8.5.2 Phoenix Contact FL MGUARD RS 8.5.2 Phoenix Contact FL MGUARD PCIE4000 VPN 8.5.2 Phoenix Contact FL MGUARD PCI4000 VPN 8.5.2 Phoenix Contact FL MGUARD PCI4000 8.5.2 Phoenix Contact FL MGUARD GT/GT VPN 8.5.2 Phoenix Contact FL MGUARD GT/GT 8.5.2 Phoenix Contact FL MGUARD DELTA TX/TX VPN 8.5.2 Phoenix Contact FL MGUARD DELTA TX/TX 8.5.2 Phoenix Contact FL MGUARD CENTERPORT 8.5.2 |
Discussion
Openswan IKEv2 payloads Remote Denial Of Service Vulnerability
Openswan is prone to a remote denial-of-service vulnerability.
An attacker may exploit this issue to restart the application, resulting in a denial-of-service condition to legitimate users.
Openswan 2.6.39 and prior are vulnerable.
Openswan is prone to a remote denial-of-service vulnerability.
An attacker may exploit this issue to restart the application, resulting in a denial-of-service condition to legitimate users.
Openswan 2.6.39 and prior are vulnerable.
Exploit / POC
Openswan IKEv2 payloads Remote Denial Of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Openswan IKEv2 payloads Remote Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Openswan IKEv2 payloads Remote Denial Of Service Vulnerability
References:
References: