remote denial of service in ipsec-tools,freeswan,openswan

2005-12-2010:26:11

lists.opensuse.org

0.179 Low

EPSS

Percentile

95.6%

JSON

Openswan, Freeswan and raccoon (ipsec-tools) have been updated to fix crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto.

Solution

There is no known workaround, please install the update packages.

OSVersionArchitecturePackageVersionFilename
openSUSE9.3i586openswan< 2.2.0-12.4openswan-2.2.0-12.4.i586.rpm
openSUSE10.0i586ipsec-tools< 0.6-4.2ipsec-tools-0.6-4.2.i586.rpm
openSUSE10.0x86_64openswan< 2.4.4-1.1openswan-2.4.4-1.1.x86_64.rpm
openSUSE10.0ppcopenswan< 2.4.4-1.1openswan-2.4.4-1.1.ppc.rpm
openSUSE9.1i586ipsec-tools< 0.3.3-1.9ipsec-tools-0.3.3-1.9.i586.rpm
openSUSE9.2x86_64ipsec-tools< 0.4rc1-3.4ipsec-tools-0.4rc1-3.4.x86_64.rpm
openSUSE9.3x86_64ipsec-tools< 0.5-5.2ipsec-tools-0.5-5.2.x86_64.rpm
openSUSE9.1i586freeswan< 2.04_1.5.4-1.23freeswan-2.04_1.5.4-1.23.i586.rpm
openSUSE9.2i586openswan< 2.2.0-8.4openswan-2.2.0-8.4.i586.rpm
openSUSE10.0x86_64ipsec-tools< 0.6-4.2ipsec-tools-0.6-4.2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	9.3	i586	openswan	< 2.2.0-12.4	openswan-2.2.0-12.4.i586.rpm
openSUSE	10.0	i586	ipsec-tools	< 0.6-4.2	ipsec-tools-0.6-4.2.i586.rpm
openSUSE	10.0	x86_64	openswan	< 2.4.4-1.1	openswan-2.4.4-1.1.x86_64.rpm
openSUSE	10.0	ppc	openswan	< 2.4.4-1.1	openswan-2.4.4-1.1.ppc.rpm
openSUSE	9.1	i586	ipsec-tools	< 0.3.3-1.9	ipsec-tools-0.3.3-1.9.i586.rpm
openSUSE	9.2	x86_64	ipsec-tools	< 0.4rc1-3.4	ipsec-tools-0.4rc1-3.4.x86_64.rpm
openSUSE	9.3	x86_64	ipsec-tools	< 0.5-5.2	ipsec-tools-0.5-5.2.x86_64.rpm
openSUSE	9.1	i586	freeswan	< 2.04_1.5.4-1.23	freeswan-2.04_1.5.4-1.23.i586.rpm
openSUSE	9.2	i586	openswan	< 2.2.0-8.4	openswan-2.2.0-8.4.i586.rpm
openSUSE	10.0	x86_64	ipsec-tools	< 0.6-4.2	ipsec-tools-0.6-4.2.x86_64.rpm

Rows per page:

1-10 of 181

0.179 Low

EPSS

Percentile

95.6%

JSON

Related for SUSE-SA:2005:070