#19917 – DoS vulnerability - remote crash in fragmentation code

Bug 19917 - DoS vulnerability - remote crash in fragmentation code

Summary: DoS vulnerability - remote crash in fragmentation code

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	ipsec-tools (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 blocker
Assignee:	Alexey Shabalin
QA Contact:	qa-sisyphus

URL:	http://sourceforge.net/mailarchive/fo...
Keywords:	security

Depends on:
Blocks:

Reported:	2009-05-05 09:39 MSD by Vladimir Lettiev
Modified:	2010-04-24 11:58 MSD (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Vladimir Lettiev 2009-05-05 09:39:44 MSD

Обнаружена уязвимость в ipsec-tools, позволяющая привести к краху процесса при обработке фрагментированных isakmp пакетов.
Upstream выпустил исправление в версии 0.7.2

Comment 1

Vladimir Lettiev 2010-04-24 11:58:16 MSD

fixed

Comment 2

Vladimir Lettiev 2010-04-24 11:58:34 MSD

closed