CVE-2004-0219: Medium severity OpenBSD OpenBSD vulnerability
Published Mar 25, 2004
·Updated
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Affected Software
1 affected component
OpenBSD OpenBSD<=3.4
Event History
Mar 25, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0219?
CVE-2004-0219 has a severity rating that indicates it can lead to a denial of service due to a crash.
2
How do I fix CVE-2004-0219?
To mitigate CVE-2004-0219, upgrade OpenBSD to version 3.5 or later, which addresses the vulnerability.
3
What systems are affected by CVE-2004-0219?
CVE-2004-0219 affects OpenBSD version 3.4 and earlier.
4
What type of attack is associated with CVE-2004-0219?
CVE-2004-0219 is associated with remote denial of service attacks using malformed ISAKMP packets.
5
Can CVE-2004-0219 be exploited remotely?
Yes, CVE-2004-0219 can be exploited remotely by sending a specially crafted ISAKMP packet.