CVE-2016-10396: High severity Ipsec-tools Ipsec-tools vulnerability
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10396?
CVE-2016-10396 is classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2016-10396?
To fix CVE-2016-10396, upgrade to an updated version of the IPsec-Tools software that addresses this vulnerability.
What is the impact of CVE-2016-10396?
The impact of CVE-2016-10396 includes the potential exhaustion of computational resources on the affected remote endpoint.
Which software is affected by CVE-2016-10396?
CVE-2016-10396 specifically affects IPsec-Tools version 0.8.2.
Is CVE-2016-10396 a DOS attack?
Yes, CVE-2016-10396 can lead to a denial of service condition due to resource exhaustion caused by ISAKMP fragment packets.