strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload.

strongswan was updated to fix two security issues :

An issue that could enable rogue servers to gain user credentials from a client in certain IKEv2 setups. (CVE-2015-4171)

A bug in decoding ID_DER_ASN1_DN ID payloads that could be used for remote denial of service attacks. (CVE-2014-2891)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201412-26 (strongSwan: Multiple Vulnerabilities)

    A NULL pointer dereference and an error in the IKEv2 implementation have       been found in strongSwan.
  Impact :

    A remote attacker could create a Denial of Service condition or bypass       security restrictions.
  Workaround :

    There is no known workaround at this time.

This update fixes a NULL ptr dereference (DoS) via ID_DER_ASN1_DN ID payloads.

strongswan was fixed to correct two issues :

  - Fix for DoS vulnerability by a NULL pointer dereference     (CVE-2014-2891).

  - Fix for a authentication bypass vulnerability in the     IKEv2 code (CVE-2014-2338).

A vulnerability has been found in the ASN.1 parser of strongSwan, an IKE/IPsec suite used to establish IPsec protected links.

By sending a crafted ID_DER_ASN1_DN ID payload to a vulnerable pluto or charon daemon, a malicious remote user can provoke a NULL pointer dereference in the daemon parsing the identity, leading to a crash and a denial of service.

ID	Name	Product	Family	Severity
84725	SUSE SLES10 Security Update : strongswan (SUSE-SU-2015:1228-1)	Nessus	SuSE Local Security Checks	medium
79979	GLSA-201412-26 : strongSwan: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	medium
76053	SuSE 11.3 Security Update : strongswan (SAT Patch Number 9251)	Nessus	SuSE Local Security Checks	medium
75367	openSUSE Security Update : strongswan (openSUSE-SU-2014:0697-1)	Nessus	SuSE Local Security Checks	medium
73867	Debian DSA-2922-1 : strongswan - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-2891

high

Tenable Plugins

medium

medium

medium

medium

medium