strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.

New upstream release 5.3.2. Fixes CVE-2014-9221 and CVE-2015-3991.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This strongswan update fixes the following security and non security issues.

  - Disallow brainpool elliptic curve groups in fips mode     (bnc#856322).

  - Applied an upstream fix for a denial-of-service     vulnerability, which can be triggered by an IKEv2 Key     Exchange payload, that contains the Diffie-Hellman group     1025 (bsc#910491,CVE-2014-9221).

  - Adjusted whilelist of approved algorithms in fips mode     (bsc#856322).

  - Updated strongswan-hmac package description     (bsc#856322).

  - Disabled explicit gpg validation; osc source_validator     does it.

  - Guarded fipscheck and hmac package in the spec file for     >13.1.

  - Added generation of fips hmac hash files using fipshmac     utility and a _fipscheck script to verify     binaries/libraries/plugings shipped in the     strongswan-hmac package. With enabled fips in the     kernel, the ipsec script will call it before any action     or in a enforced/manual 'ipsec _fipscheck' call. Added     config file to load openssl and kernel af-alg plugins,     but not all the other modules which provide     further/alternative algs. Applied a filter disallowing     non-approved algorithms in fips mode.
    (fate#316931,bnc#856322).

  - Fixed file list in the optional (disabled)     strongswan-test package.

  - Fixed build of the strongswan built-in integrity     checksum library and enabled building it only on     architectures tested to work.

  - Fix to use bug number 897048 instead 856322 in last     changes entry.

  - Applied an upstream patch reverting to store algorithms     in the registration order again as ordering them by     identifier caused weaker algorithms to be proposed first     by default (bsc#897512).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fixes strongswan swanctl service issue rhbz#1193106 Fixes CVE-2014-9221 denial-of-service vulnerability.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following security issues :

  - denial-of-service vulnerability, which can be triggered     by an IKEv2 Key Exchange payload, that contains the     Diffie-Hellman group 1025 (bsc#910491,CVE-2014-9221).

  - Applied an upstream patch reverting to store algorithms     in the registration order again as ordering them by     identifier caused weaker algorithms to be proposed first     by default (bsc#897512).

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2450-1 advisory.

    Mike Daskalakis discovered that strongSwan incorrectly handled IKEv2 payloads that contained the Diffie-     Hellman group 1025. A remote attacker could use this issue to cause the IKE daemon to crash, resulting in     a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Mike Daskalakis reported a denial of service vulnerability in charon, the IKEv2 daemon for strongSwan, an IKE/IPsec suite used to establish IPsec protected links.

The bug can be triggered by an IKEv2 Key Exchange (KE) payload that contains the Diffie-Hellman (DH) group 1025. This identifier is from the private-use range and only used internally by libtls for DH groups with custom generator and prime (MODP_CUSTOM). As such the instantiated method expects that these two values are passed to the constructor. This is not the case when a DH object is created based on the group in the KE payload. Therefore, an invalid pointer is dereferenced later, which causes a segmentation fault.

This means that the charon daemon can be crashed with a single IKE_SA_INIT message containing such a KE payload. The starter process should restart the daemon after that, but this might increase load on the system. Remote code execution is not possible due to this issue, nor is IKEv1 affected in charon or pluto.

ID	Name	Product	Family	Severity
85561	Fedora 22 : strongswan-5.3.2-1.fc22 (2015-5279)	Nessus	Fedora Local Security Checks	critical
83680	SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:0281-1)	Nessus	SuSE Local Security Checks	medium
82307	Fedora 21 : strongswan-5.2.2-2.fc21 (2015-3043)	Nessus	Fedora Local Security Checks	medium
80988	openSUSE Security Update : strongswan (openSUSE-SU-2015:0114-1)	Nessus	SuSE Local Security Checks	medium
80391	Ubuntu 14.04 LTS : strongSwan vulnerability (USN-2450-1)	Nessus	Ubuntu Local Security Checks	high
80361	Debian DSA-3118-1 : strongswan - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-9221

medium

Tenable Plugins

critical

medium

medium

medium

high

medium