Project

General

Profile

Version 4.2.7 » History » Version 2

« Previous - Version 2/3 (diff) - Next » - Current version
Andreas Steffen, 29.04.2009 16:01
Milestone


Fixed a Denial-of-Service vulnerability where an IKE_SA_INIT message with
a KE payload containing zeroes only can cause a crash of the IKEv2 charon
daemon due to a NULL pointer returned by the mpz_export() function of the
GNU Multiprecision Library (GMP). Thanks go to Mu Dynamics Research Labs
for making us aware of this problem.