Bug 238052 (CVE-2007-1841)

Summary:	CVE-2007-1841 ipsec-tools racoon DoS
Product:	[Other] Security Response	Reporter:	Josh Bressers <bressers>
Component:	vulnerability	Assignee:	Steve Conklin <sconklin>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	lkundrak, mef, mmahut, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	ipsec-tools-0.6.6-6.fc7	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-11-01 20:41:46 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2007-04-26 20:22:50 UTC

+++ This bug was initially created as a clone of Bug #235388 +++

Apple reported a denial of service flaw in the ipsec-tools racoon.  It is
possible for a remote attacker to invalidate an ipsec tunnel between two
machines.  According to upstream:

Anybody who can:

- guess that A and B have established an IPSec tunnel
- guess some basic informations about phase1 (or who is ready to do
  some quick bruteforce....) 
- send packed to A which appears to come from B

Can invalidate that tunnel at any time.

-- Additional comment from bressers on 2007-04-05 11:11 EST --
Created an attachment (id=151768)
Proposed upstream patch

Comment 1 Josh Bressers 2007-04-26 20:24:19 UTC

This flaw should also affect FC5

Comment 2 Lubomir Kundrak 2007-08-02 12:31:08 UTC

Steve: please do push an update for FC6. Thanks.

Comment 3 Michael Forrest 2007-08-05 05:28:56 UTC

Because this only fixed in upstream ipsec-tools 0.6.7, Fedora 7 (at version
0.6.6) may also be vulnerable.

Comment 4 Lubomir Kundrak 2007-08-08 13:55:09 UTC

Raising priority. This needs to be fixed.

Comment 5 Steve Conklin 2007-08-14 17:42:17 UTC

This has been pushed as a fedora testing update, version ipsec-tools-0.6.5-8.fc6

After a few days, I'll push to the fedora update.

Comment 6 Lubomir Kundrak 2007-08-20 16:07:09 UTC

Steve: Could you please proceed pushing, unless you have a strong reason not to?

Comment 7 Steve Grubb 2007-08-27 17:22:35 UTC

A new package was pushed to release team last week.