Version 4.2.7 » History » Version 2
« Previous -
Version 2/3
(diff) -
Next » -
Current version
Andreas Steffen, 29.04.2009 16:01
Milestone
Fixed a Denial-of-Service vulnerability where an IKE_SA_INIT message with
a KE payload containing zeroes only can cause a crash of the IKEv2 charon
daemon due to a NULL pointer returned by the mpz_export() function of the
GNU Multiprecision Library (GMP). Thanks go to Mu Dynamics Research Labs
for making us aware of this problem.