CVE-2004-0221: Medium severity OpenBSD OpenBSD vulnerability
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0221?
CVE-2004-0221 has a moderate severity level due to its potential to cause denial of service.
How do I fix CVE-2004-0221?
To fix CVE-2004-0221, upgrade to a version of OpenBSD later than 3.4 where the vulnerability is patched.
Who is affected by CVE-2004-0221?
CVE-2004-0221 affects users running OpenBSD version 3.4 or earlier.
What does CVE-2004-0221 exploit?
CVE-2004-0221 exploits a vulnerability in isakmpd that allows remote attackers to cause a crash using specially crafted ISAKMP packets.
What can attackers achieve with CVE-2004-0221?
Attackers can achieve denial of service against systems running vulnerable versions of OpenBSD.