The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ipsec-tools: Parsing and storing ISAKMP fragments in malicious order can exhaust resources     (CVE-2016-10396)

  - racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer     dereference and IKE daemon crash) via a series of crafted UDP requests. (CVE-2015-4047)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

Robert Foggia via NetBSD GNATS reports :

The ipsec-tools racoon daemon contains a remotely exploitable computational complexity attack when parsing and storing isakmp fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending isakmp fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.

This update for ipsec-tools fixes one issue.

This security issue was fixed :

  - CVE-2016-10396: The racoon daemon contained a remotely     exploitable computational-complexity attack when parsing     and storing ISAKMP fragments that allowed a remote     attacker to exhaust computational resources on the     remote endpoint by repeatedly sending ISAKMP fragment     packets in a particular order (bsc#1047443).

This update was imported from the SUSE:SLE-12:Update update project.

This update for ipsec-tools fixes one issue. This security issue was fixed :

  - CVE-2016-10396: The racoon daemon contained a remotely     exploitable computational-complexity attack when parsing     and storing ISAKMP fragments that allowed a remote     attacker to exhaust computational resources on the     remote endpoint by repeatedly sending ISAKMP fragment     packets in a particular order (bsc#1047443).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The racoon daemon in IPsec-Tools 0.8.2 and earlier contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.

For Debian 7 'Wheezy', these problems have been fixed in version 1:0.8.0-14+deb7u2.

We recommend that you upgrade your ipsec-tools packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199954	RHEL 5 : ipsec-tools (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
195459	RHEL 5 : ipsec-tools (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
109054	FreeBSD : ipsec-tools -- remotely exploitable computational-complexity attack (974a6d32-3fda-11e8-aea4-001b216d295b)	Nessus	FreeBSD Local Security Checks	high
106814	openSUSE Security Update : ipsec-tools (openSUSE-2018-159)	Nessus	SuSE Local Security Checks	high
106788	SUSE SLES12 Security Update : ipsec-tools (SUSE-SU-2018:0424-1)	Nessus	SuSE Local Security Checks	high
106787	SUSE SLES11 Security Update : ipsec-tools (SUSE-SU-2018:0423-1)	Nessus	SuSE Local Security Checks	high
102042	Debian DLA-1044-1 : ipsec-tools security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-10396

high

Tenable Plugins

high

high

high

high

high

high

high