Null pointer dereference in Openswan - CVE-2013-6466

Vulnerability identifier: #VU8168

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-6466

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to NULL pointer dereference when handling malicious input. A remote attacker can supply specially crafted IKEv2 packets that lack expected payloads and cause IKE daemon to restart.

Successful exploitation of the vulnerability results in denial of service.

Openswan
FL MGUARD GT/GT
TC MGUARD RS4000 4G VPN
TC MGUARD RS2000 4G VPN
TC MGUARD RS4000 3G VPN
TC MGUARD RS2000 3G VPN
FL MGUARD RS VPN ANALOG
FL MGUARD RS
FL MGUARD ENTERPORT
FL MGUARD RS4000 TX/TX VPN-M
FL MGUARD RS4000 TX/TX-P
FL MGUARD RS4004 TX/DTX VPN
FL MGUARD RS2005 TX VPN
FL MGUARD RS4000 TX/TX VPN
FL MGUARD GT/GT VPN
FL MGUARD RS4000 TX/TX
FL MGUARD SMART2 VPN
FL MGUARD SMART2
FL MGUARD RS2000 TX/TX VPN
FL MGUARD DELTA TX/TX VPN
FL MGUARD PCI4000
FL MGUARD PCI4000 VPN
FL MGUARD PCIE4000 VPN
FL MGUARD RS4004 TX/DTX
FL MGUARD DELTA TX/TX
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Workstation
openswan (Alpine package)

Update to version 2.6.40.

openswan (Alpine package) - update to 2.6.41-r0

• https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt

• Denial of service in mGuard Firmware
• Gentoo update for Openswan
• Amazon Linux AMI update for openswan
• Red Hat update for openswan
• Null pointer dereference in openswan (Alpine package)