Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Gentoo: GLSA-202310-05 Normal: Openswan, IPsec-Tools DDoS Issue

gentoo
Calendar Grey December 12, 2005
Scroller Gentoo
FreeS/WAN and IKEv2 utilities are susceptible to DDoS vulnerabilities stemming from ISAKMP weaknesses. It is recommended to perform an upgrade to enhance security and reduce exposure.
Openswan and IPsec-Tools suffer from an implementation flaw which may allow a Denial of Service attack.

Summary

Gentoo Linux Security Advisory GLSA 200512-04 https://security.gentoo.org/ Severity: Normal Title: Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation Date: December 12, 2005 Bugs: #112568, #113201 ID: 200512-04

Synopsis ======= Openswan and IPsec-Tools suffer from an implementation flaw which may allow a Denial of Service attack.
Background ========= Openswan is an implementation of IPsec for Linux. IPsec-Tools is a port of KAME's implementation of the IPsec utilities, including racoon, an Internet Key Exchange daemon. Internet Key Exchange version 1 (IKEv1), a derivate of ISAKMP, is an important part of IPsec. IPsec is widely used to secure exchange of packets at the IP layer and mostly used to implement Virtual Private Networks (VPNs).
...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround