PT-2017-7894 · Ipsec Tools+2 · Ipsec-Tools+2

Robert Foggia · Published 2017-07-05 · Updated 2018-08-30 · CVE-2016-10396

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IPsec-Tools version 0.8.2

Description The issue concerns a computational-complexity attack that can be remotely exploited when parsing and storing ISAKMP fragments. This occurs because the implementation allows a remote attacker to exhaust computational resources by sending ISAKMP fragment packets in a specific order, resulting in the worst-case computational complexity in the algorithm used for fragment reassembly.

Recommendations For IPsec-Tools version 0.8.2, consider restricting access to the racoon daemon to minimize the risk of exploitation until a patch is available. As a temporary workaround, limiting the reception of ISAKMP fragment packets may help mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-407

Related Identifiers

ALT-PU-2018-2254

CVE-2016-10396

DLA-1044-1

SUSE-SU-2018:0423-1

SUSE-SU-2018:0424-1

SUSE-SU-2018_0423-1

SUSE-SU-2018_0424-1

USN-3482-1

Affected Products

Alt Linux

Ipsec-Tools

Suse

References · 15

• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10396 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10396 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-10396 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-10396 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:0424-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3482-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10396 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0423-1 · Vendor Advisory
• http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/isakmp_frag.c?only_with_tag=MAIN · Note
• https://suse.com/support/update/announcement/2018/suse-su-20180424-1 · Note
• https://bugzilla.suse.com/1047443 · Note
• https://suse.com/support/update/announcement/2018/suse-su-20180423-1 · Note
• https://suse.com/security/cve/CVE-2016-10396 · Note
• http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/isakmp_frag.c.diff?r1=1.5&r2=1.5.36.1 · Note
• https://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=51682 · Note