Thomas Walpuski has reported a vulnerability in OpenBSD isakmpd, which can be exploited by malicious people to cause a DoS (Denial of Service) on users' connections.

The vulnerability is caused due to multiple payload handling errors. These make it possible to perform unauthorised deletion of ISAKMP Security Associations (SAs), which identify sessions and are used to describe how communicating entities should use security services.

Successful exploitation allows deletion of arbitrary IPsec tunnels.

Solution
OpenBSD har udgivet patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Thomas Walpuski

Deep Links
Links available to Secunia VIM customers