Debian: freeswan DoS Vulnerability

    Date02 Dec 2002
    CategoryDebian
    3082
    Posted ByLinuxSecurity Advisories
    Free/SWan in Debain does not properly handle certain very short packets and is said to cause a kernel panic.
    
    --------------------------------------------------------------------------
    Debian Security Advisory DSA 201-1                     This email address is being protected from spambots. You need JavaScript enabled to view it.
    	 
    http://www.debian.org/security/                             Martin Schulze
    December 2nd, 2002                       http://www.debian.org/security/faq
    --------------------------------------------------------------------------
    
    Package        : freeswan
    Vulnerability  : denial of service
    Problem-type   : remore
    Debian-specific: no
    CERT advisory  : VU#459371
    
    Bindview discovered a problem in several IPSEC implementations that do
    not properly handle certain very short packets.  IPSEC is a set of
    security extensions to IP which provide authentication and encryption.
    Free/SWan in Debain is affected by this and is said to cause a kernel
    panic.
    
    This problem has been fixed in version 1.96-1.4 for the current stable
    distribution (woody) and in version 1.99-1 for the unstable
    distribution (sid).  The old stable distribution (potato) does not
    contain Free/SWan packages.
    
    We recommend that you upgrade your freeswan package.
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    
    Debian GNU/Linux 3.0 alias woody
    --------------------------------
    
      Source archives:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4.dsc
          Size/MD5 checksum:      637 1917ba063e4058123034247ddb105bfa
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4.diff.gz
          Size/MD5 checksum:   322480 ad70a2ecd67bbc1ae7b6eb6fcdb84da8
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96.orig.tar.gz
          Size/MD5 checksum:  2251757 9ea1a778713e48d39f3c77de5f54752b
    
      Architecture independent components:
    
         http://security.debian.org/pool/updates/main/f/freeswan/kernel-patch-freeswan_1.96-1.4_all.deb
          Size/MD5 checksum:   889918 30c73e274e84b62125136ec96160d23a
    
      Alpha architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_alpha.deb
          Size/MD5 checksum:  1761260 2463d0474314aa775126544baea6ec95
    
      ARM architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_arm.deb
          Size/MD5 checksum:  1700504 f15929f25fb8bb953748edbe188511ba
    
      Intel IA-32 architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_i386.deb
          Size/MD5 checksum:  1678486 878523a3a03254bfa1e6a39052b50e1b
    
      Intel IA-64 architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_ia64.deb
          Size/MD5 checksum:  1861640 8a1a611c76cd023311bae7126dfa5b8a
    
      HP Precision architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_hppa.deb
          Size/MD5 checksum:  1723252 22df2896c7f4f96a693da436addc6d95
    
      Motorola 680x0 architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_m68k.deb
          Size/MD5 checksum:  1660918 a55f47febd01eefd216e0da3b200de76
    
      Big endian MIPS architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_mips.deb
          Size/MD5 checksum:  1718046 e8fc45985fc4c25a2a9b9ab7d6e21e08
    
      Little endian MIPS architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_mipsel.deb
          Size/MD5 checksum:  1721266 c1bd4591da7f720d3fe7b4e134ac9f22
    
      PowerPC architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_powerpc.deb
          Size/MD5 checksum:  1688682 0e1b5ce54d414da362c7eeda097acfa9
    
      IBM S/390 architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_s390.deb
          Size/MD5 checksum:  1689648 fa2ac3caafbb37cbcde0138ba9b8f6c6
    
      Sun Sparc architecture:
    
         http://security.debian.org/pool/updates/main/f/freeswan/freeswan_1.96-1.4_sparc.deb
          Size/MD5 checksum:  1706714 53ef4472274ffaac7e24455d9ec6c1a1
    
    
      These files will probably be moved into the stable distribution on
      its next revision.
    
    
    Survey on the use of Debian GNU/Linux 2.2 alias potato: 
    http://lists.debian.org/debian-devel-announce-0211/msg00001.html
    
    ---------------------------------------------------------------------------------
    For apt-get: deb  http://security.debian.org/ stable/updates main
    For dpkg-ftp:  ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and  http://packages.debian.org/
    
    
    
    
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"37","type":"x","order":"1","pct":51.39,"resources":[]},{"id":"88","title":"Should be more technical","votes":"10","type":"x","order":"2","pct":13.89,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"25","type":"x","order":"3","pct":34.72,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.