Libreswan 'ikev2parent_inI1outR1()'函数远程拒绝服务漏洞

BUGTRAQ ID: 64984 CVECAN ID: CVE-2013-7294 Libreswan是Linux平台上的IPsec实现，支持很多IPsec扩展，包括IKEv2, X.509 Digital Certificates, NAT Traversal等。 Libreswan 3.7之前版本，programs/pluto/ikev2parent.c内的函数 ikev2parentinI1outR1 存在安全漏洞，可导致远程拒绝服务。此漏洞源于处理KE负载时，IKEv2 I1通知失败。 0 libreswan libreswan 3.6 厂商补丁： libreswan...

libreswan多个漏洞

CVE ID：CVE-2013-4564 Libreswan是一款类似OpenSwan的IPsec实现。 1处理"processpacket方法pluto/demux.c中IKE数据包时的错误，导致通过特制的IKE数据包造成libreswan重新启动。 2处理"ikev2parentinI1outR1"函数（pluto/ikev2parent.c中IKE通告报文时的错误，导致利用特制的IKE引起libreswan重新启动。 3为RHEL处理libreswan.spec文件时应用程序不安全创建/var/tmp/libreswan-nss-pwd文件，可被利用来操纵某些数据。 0...

[SECURITY] Fedora 20 Update: libreswan-3.7-1.fc20

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 19 Update: libreswan-3.7-1.fc19

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 18 Update: libreswan-3.7-1.fc18

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Fedora Update for libreswan FEDORA-2013-23299

Check for the Version of libreswan OpenVAS Vulnerability Test Fedora Update for libreswan FEDORA-2013-23299 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for libreswan FEDORA-2013-23315

Check for the Version of libreswan OpenVAS Vulnerability Test Fedora Update for libreswan FEDORA-2013-23315 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[ike-scan] Discover & Fingerprint IKE Hosts (IPsec VPN Servers)

ike-scan discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern. ike-scan can perform the following functions: Discovery Determine which hosts in a given IP range are running IKE. This is done by displaying those hosts which respond to the IKE requests sent by...

CVE-2013-6694

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

Information disclosure

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

Cisco IOS Software ICMP Processing Denial of Service Vulnerability

A vulnerability in IPSec tunnel implementation of Cisco IOS Software could allow an unauthenticated, remote attacker to change the tunnel MTU or path MTU and potentially cause IPSec tunnels to drop. The vulnerability is due to incorrect processing of certain ICMP packets. An attacker could exploi...

CVE-2013-6694

The vulnerability CVE-2013-6694 affects the IPSec tunnel implementation in Cisco IOS Software. It allows an unauthenticated, remote attacker to change the tunnel MTU or path MTU and potentially cause IPSec tunnels to drop by sending crafted ICMP packets. Root cause: incorrect processing of certai...

CVE-2013-6694

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

CVE-2013-6694: Improper Input Validation

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

Kernel: net: information leak in AF_KEY notify

The 1 keynotifysaflush and 2 keynotifypolicyflush functions in net/key/afkey.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of ...

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95069 Stand: 13. Ergänzungslieferung 13. EL...

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95069 Stand: 13. Ergänzungslieferung 13. EL. OpenVAS Vulnerabili...

Debian DSA-2789-1 : strongswan - Denial of service and authorization bypass

A vulnerability has been found in the ASN.1 parser of strongSwan, an IKE daemon used to establish IPsec protected links. By sending a crafted IDDERASN1DN ID payload to a vulnerable pluto or charon daemon, a malicious remote user can provoke a denial of service daemon crash or an authorization...

CVE-2013-5548

The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...

Authentication flaw

The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...