Summary
Openswan 2.6.39 and earlier, which is used in the mGuard firmware version 8.0.0 to 8.5.1, allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
Details
Impact
Specially crafted IKEv2 packets may force an IKE daemon restart and force a restart of all IPsec connections. There is no access to sensitive information or tunnel content possible by this attack.
Remediation
PHOENIX CONTACT and Innominate recommend all customers running mGuard devices with affected firmware versions to update to firmware version 8.5.2 or higher, which fixes this vulnerability. Updates can be found on the vendor's 'Downloads' page for each of the affected devices.
Vulnerabilities 1
-
Unscored —
Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daem…
Revision history
-
#3
Fix: version space, removed ia, quotation mark
-
#2
Fix: correct certvde domain, added self-reference
-
#1
Initial revision.
References
-
Phoenix Contact PSIRT
https://www.phoenixcontact.com/de-de/service-und-support/psirt
-
CERT@VDE Security Advisories for Phoenix Contact
https://certvde.com/en/advisories/vendor/phoenixcontact/
-
VDE-2017-001: PHOENIX CONTACT: mGuard IKE daemon remote denial of service - HTML
https://certvde.com/en/advisories/VDE-2017-001/