diff options
author | Roy Li <rongqing.li@windriver.com> | 2015-06-05 13:23:28 +0800 |
---|---|---|
committer | Joe MacDonald <joe_macdonald@mentor.com> | 2015-06-05 19:05:40 -0400 |
commit | 671304f007694b4329518aeb88e2f283fae75385 (patch) | |
tree | fb24680153417174c1a9aa9754b7b6482a2ef048 /meta-networking/recipes-support/ipsec-tools | |
parent | 58dbb3ef9e850188c469a64deffd02b628c73f74 (diff) | |
download | meta-openembedded-671304f007694b4329518aeb88e2f283fae75385.tar.gz |
ipsec-tools: Security Advisory - CVE-2015-4047
This fixed the CVE-2015-4047:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4047
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Diffstat (limited to 'meta-networking/recipes-support/ipsec-tools')
-rw-r--r-- | meta-networking/recipes-support/ipsec-tools/ipsec-tools/fix-CVE-2015-4047.patch | 36 | ||||
-rw-r--r-- | meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb | 1 |
2 files changed, 37 insertions, 0 deletions
diff --git a/meta-networking/recipes-support/ipsec-tools/ipsec-tools/fix-CVE-2015-4047.patch b/meta-networking/recipes-support/ipsec-tools/ipsec-tools/fix-CVE-2015-4047.patch new file mode 100644 index 000000000..5286376ac --- /dev/null +++ b/meta-networking/recipes-support/ipsec-tools/ipsec-tools/fix-CVE-2015-4047.patch | |||
@@ -0,0 +1,36 @@ | |||
1 | [PATCH] fix CVE-2015-4047 | ||
2 | |||
3 | Upstream-Status: Backport | ||
4 | |||
5 | http://www.openwall.com/lists/oss-security/2015/05/20/1 | ||
6 | |||
7 | racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause | ||
8 | a denial of service (NULL pointer dereference and IKE daemon crash) via | ||
9 | a series of crafted UDP requests. | ||
10 | |||
11 | https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4047 | ||
12 | |||
13 | Signed-off-by: Roy Li <rongqing.li@windriver.com> | ||
14 | --- | ||
15 | src/racoon/gssapi.c | 5 +++++ | ||
16 | 1 file changed, 5 insertions(+) | ||
17 | |||
18 | diff --git a/src/racoon/gssapi.c b/src/racoon/gssapi.c | ||
19 | index e64b201..1ad3b42 100644 | ||
20 | --- a/src/racoon/gssapi.c | ||
21 | +++ b/src/racoon/gssapi.c | ||
22 | @@ -192,6 +192,11 @@ gssapi_init(struct ph1handle *iph1) | ||
23 | gss_name_t princ, canon_princ; | ||
24 | OM_uint32 maj_stat, min_stat; | ||
25 | |||
26 | + if (iph1->rmconf == NULL) { | ||
27 | + plog(LLV_ERROR, LOCATION, NULL, "no remote config\n"); | ||
28 | + return -1; | ||
29 | + } | ||
30 | + | ||
31 | gps = racoon_calloc(1, sizeof (struct gssapi_ph1_state)); | ||
32 | if (gps == NULL) { | ||
33 | plog(LLV_ERROR, LOCATION, NULL, "racoon_calloc failed\n"); | ||
34 | -- | ||
35 | 1.9.1 | ||
36 | |||
diff --git a/meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb b/meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb index 67b70d037..bb6fe84d9 100644 --- a/meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb +++ b/meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb | |||
@@ -18,6 +18,7 @@ SRC_URI = "ftp://ftp.netbsd.org/pub/NetBSD/misc/ipsec-tools/0.8/ipsec-tools-${PV | |||
18 | file://racoon.conf.sample \ | 18 | file://racoon.conf.sample \ |
19 | file://racoon.conf \ | 19 | file://racoon.conf \ |
20 | file://racoon.service \ | 20 | file://racoon.service \ |
21 | file://fix-CVE-2015-4047.patch \ | ||
21 | " | 22 | " |
22 | SRC_URI[md5sum] = "d53ec14a0a3ece64e09e5e34b3350b41" | 23 | SRC_URI[md5sum] = "d53ec14a0a3ece64e09e5e34b3350b41" |
23 | SRC_URI[sha256sum] = "8eb6b38716e2f3a8a72f1f549c9444c2bc28d52c9536792690564c74fe722f2d" | 24 | SRC_URI[sha256sum] = "8eb6b38716e2f3a8a72f1f549c9444c2bc28d52c9536792690564c74fe722f2d" |