Null pointer dereference in openswan (Alpine package)

1) Null pointer dereference

EUVDB-ID: #VU8168

Risk: Low

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2013-6466

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to NULL pointer dereference when handling malicious input. A remote attacker can supply specially crafted IKEv2 packets that lack expected payloads and cause IKE daemon to restart.

Successful exploitation of the vulnerability results in denial of service.

Mitigation

Install update from vendor's website.

Vulnerable software versions

openswan (Alpine package): 2.6.38-r2 - 2.6.38-r3

CPE2.3

• cpe:2.3:o:alpine:openswan_alpine_package:2.6.38-r2:*:*:*:*:alpine_linux:*:2.3
• cpe:2.3:o:alpine:openswan_alpine_package:2.6.38-r3:*:*:*:*:alpine_linux:*:2.6

External links

https://git.alpinelinux.org/aports/commit/?id=f61b6c8609c53376958880ab2a1741f6888859a4
https://git.alpinelinux.org/aports/commit/?id=95c7f93375ff9e15f0ccd68ff25ae08f230dec98
https://git.alpinelinux.org/aports/commit/?id=1df893d29e73824172978ca87bc5575b1fcace34
https://git.alpinelinux.org/aports/commit/?id=59f82a99051677a0a8ffbd33585293f529cf627c

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.