isakmpd memory corruption vulnerability

Jose Nazario <[email protected]> Wed, 17 Mar 2004 10:59:32 -0700 (MST)

Newsgroups	gmane.os.openbsd.security.announce
Message-ID	<[email protected]>

Several bugs have been found in the ISAKMP daemon which can lead to memory 
leaks and a remote denial of service condition. An attacker can craft 
malformed payloads that can cause the isakmpd(8) process to stop 
processing requests.

The problem is fixed in -current, 3.4-stable and 3.3-stable.

Patches are available at:

  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/015_isakmpd2.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.3/common/020_isakmpd2.patch