Bug 238052 (CVE-2007-1841) - CVE-2007-1841 ipsec-tools racoon DoS
Summary: CVE-2007-1841 ipsec-tools racoon DoS
Status: CLOSED CURRENTRELEASE
Alias: CVE-2007-1841
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Steve Conklin
QA Contact:
URL:
Whiteboard: source=vendorsec,reported=20070331,pu...
Keywords: Security
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-04-26 20:22 UTC by Josh Bressers
Modified: 2018-08-15 22:28 UTC (History)
4 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2007-11-01 20:41:46 UTC


Attachments (Terms of Use)

Description Josh Bressers 2007-04-26 20:22:50 UTC
+++ This bug was initially created as a clone of Bug #235388 +++

Apple reported a denial of service flaw in the ipsec-tools racoon.  It is
possible for a remote attacker to invalidate an ipsec tunnel between two
machines.  According to upstream:

Anybody who can:

- guess that A and B have established an IPSec tunnel
- guess some basic informations about phase1 (or who is ready to do
  some quick bruteforce....) 
- send packed to A which appears to come from B

Can invalidate that tunnel at any time.

-- Additional comment from bressers@redhat.com on 2007-04-05 11:11 EST --
Created an attachment (id=151768)
Proposed upstream patch

Comment 1 Josh Bressers 2007-04-26 20:24:19 UTC
This flaw should also affect FC5

Comment 2 Lubomir Kundrak 2007-08-02 12:31:08 UTC
Steve: please do push an update for FC6. Thanks.

Comment 3 Michael Forrest 2007-08-05 05:28:56 UTC
Because this only fixed in upstream ipsec-tools 0.6.7, Fedora 7 (at version
0.6.6) may also be vulnerable.



Comment 4 Lubomir Kundrak 2007-08-08 13:55:09 UTC
Raising priority. This needs to be fixed.

Comment 5 Steve Conklin 2007-08-14 17:42:17 UTC
This has been pushed as a fedora testing update, version ipsec-tools-0.6.5-8.fc6

After a few days, I'll push to the fedora update.

Comment 6 Lubomir Kundrak 2007-08-20 16:07:09 UTC
Steve: Could you please proceed pushing, unless you have a strong reason not to?

Comment 7 Steve Grubb 2007-08-27 17:22:35 UTC
A new package was pushed to release team last week.


Note You need to log in before you can comment on or make changes to this bug.