isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=108008530028019&w=2 | Mailing List Third Party Advisory |
| http://www.kb.cert.org/vuls/id/524497 | Third Party Advisory US Government Resource |
| http://www.openbsd.org/errata.html | Product Vendor Advisory |
| http://www.rapid7.com/advisories/R7-0018.html | Broken Link |
| http://www.securityfocus.com/bid/9907 | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/alerts/2004/Mar/1009468.html | Broken Link Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15630 | Third Party Advisory VDB Entry |
Configurations
History
15 Feb 2024, 21:09
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-125 | |
| References | () http://marc.info/?l=bugtraq&m=108008530028019&w=2 - Mailing List, Third Party Advisory | |
| References | () http://www.kb.cert.org/vuls/id/524497 - Third Party Advisory, US Government Resource | |
| References | () http://www.openbsd.org/errata.html - Product, Vendor Advisory | |
| References | () http://www.rapid7.com/advisories/R7-0018.html - Broken Link | |
| References | () http://www.securityfocus.com/bid/9907 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/alerts/2004/Mar/1009468.html - Broken Link, Third Party Advisory, VDB Entry | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/15630 - Third Party Advisory, VDB Entry |
Information
Published : 2004-05-04 04:00
Updated : 2024-02-15 21:09
NVD link : CVE-2004-0221
Mitre link : CVE-2004-0221
CVE.ORG link : CVE-2004-0221
JSON object : View
Products Affected
openbsd
- openbsd
CWE
CWE-125
Out-of-bounds Read