SB2011111702 - Input validation error in Openswan

Description

This security bulletin contains information about 1 vulnerability.

1) Input validation error (CVE-ID: CVE-2011-3380)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows remote attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, which is not properly handled by the error handling function.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• http://secunia.com/advisories/46306
• http://www.openswan.org/download/CVE-2011-3380/CVE-2011-3380.txt
• http://www.redhat.com/support/errata/RHSA-2011-1356.html