Bug 238052 (CVE-2007-1841) - CVE-2007-1841 ipsec-tools racoon DoS
Summary: CVE-2007-1841 ipsec-tools racoon DoS
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: CVE-2007-1841
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Steve Conklin
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-04-26 20:22 UTC by Josh Bressers
Modified: 2019-09-29 12:20 UTC (History)
4 users (show)

Fixed In Version: ipsec-tools-0.6.6-6.fc7
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2007-11-01 20:41:46 UTC
Embargoed:

Attachments (Terms of Use)

Description Josh Bressers 2007-04-26 20:22:50 UTC 
+++ This bug was initially created as a clone of Bug #235388 +++

Apple reported a denial of service flaw in the ipsec-tools racoon.  It is
possible for a remote attacker to invalidate an ipsec tunnel between two
machines.  According to upstream:

Anybody who can:

- guess that A and B have established an IPSec tunnel
- guess some basic informations about phase1 (or who is ready to do
  some quick bruteforce....) 
- send packed to A which appears to come from B

Can invalidate that tunnel at any time.

-- Additional comment from bressers on 2007-04-05 11:11 EST --
Created an attachment (id=151768)
Proposed upstream patch
Comment 1 Josh Bressers 2007-04-26 20:24:19 UTC 
This flaw should also affect FC5
Comment 2 Lubomir Kundrak 2007-08-02 12:31:08 UTC 
Steve: please do push an update for FC6. Thanks.
Comment 3 Michael Forrest 2007-08-05 05:28:56 UTC 
Because this only fixed in upstream ipsec-tools 0.6.7, Fedora 7 (at version
0.6.6) may also be vulnerable.
Comment 4 Lubomir Kundrak 2007-08-08 13:55:09 UTC 
Raising priority. This needs to be fixed.
Comment 5 Steve Conklin 2007-08-14 17:42:17 UTC 
This has been pushed as a fedora testing update, version ipsec-tools-0.6.5-8.fc6

After a few days, I'll push to the fedora update.
Comment 6 Lubomir Kundrak 2007-08-20 16:07:09 UTC 
Steve: Could you please proceed pushing, unless you have a strong reason not to?
Comment 7 Steve Grubb 2007-08-27 17:22:35 UTC 
A new package was pushed to release team last week.
Note You need to log in before you can comment on or make changes to this bug.