CVE-2004-0220
- State
- Published
- Severity
- Not scored
- Published
- Mar 25, 2004
- Updated
- Aug 8, 2024
- Reserved
- Mar 13, 2004
Description
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1009468vdb-entry
- 9907vdb-entry
- 20040317 015: RELIABILITY FIX: March 17, 2004vendor-advisory
- 20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilitiesmailing-list
- VU#223273third-party-advisory
- openbsd-isakmp-integer-underflow(15629)vdb-entry
- http://www.rapid7.com/advisories/R7-0018.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.