[saag] Fwd: [oss-security] Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack

Jeffrey Walton <noloader@gmail.com> Wed, 19 October 2016 03:03 UTC

MIME-Version: 1.0
In-Reply-To: <CANO=Ty0yD+DmmeqC3dS2u=4+QNawqt6OJjyXRW2x1pqid=S5tQ@mail.gmail.com>
References: <20160613144048.9BBA942E034@smtpvbsrv1.mitre.org> <f24b7778-0446-c5d1-4905-e75a580fcbc4@redhat.com> <e2b42449-584c-9d7f-070e-b65b3150d3bc@redhat.com> <CANO=Ty0yD+DmmeqC3dS2u=4+QNawqt6OJjyXRW2x1pqid=S5tQ@mail.gmail.com>
From: Jeffrey Walton <noloader@gmail.com>
Date: Tue, 18 Oct 2016 23:03:28 -0400
Message-ID: <CAH8yC8mgyB29TMaq+O6JRaDhP8Yod06KJ97EZC=7FY0Hd6sdtA@mail.gmail.com>
To: "saag@ietf.org" <saag@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/2D92Lez2VXMOBgqvLq4F_8u_cCI>
Subject: [saag] Fwd: [oss-security] Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack
Precedence: list
Reply-To: noloader@gmail.com

FYI...

---------- Forwarded message ----------
From: Kurt Seifried <kseifried@redhat.com>
Date: Tue, Oct 18, 2016 at 3:19 PM
Subject: Re: [oss-security] Re: CVE Request: IKEv1 protocol is
vulnerable to DoS amplification attack
To: oss-security <oss-security@lists.openwall.com>
Cc: Huzaifa Sidhpurwala <huzaifas@redhat.com>, CVE ID Requests
<cve-assign@mitre.org>

On Tue, Jul 12, 2016 at 1:46 PM, Paul Wouters <pwouters@redhat.com> wrote:
>
> I have tested openswan and strongswan and confirmed it contains the same
> amplification that is inherent in being IKEv1 compliant.
>
> Neither implementation has applied the hardening that libreswan has
> applied for this that was the original information that caused
> CVE-2016-5361 to be issued for libreswan.
>
> I believe MITRE needs to fix the inconsistency in the issuance of
> CVE-2016-5361, expand it to be about the IKEv1 protocol, and gather
> the other vendor information and patches, or issue additional vendor
> specific CVE's. I believe the first solution is better.
>

So I had a chance to talk to Paul

Basically: the RFC doesn't define a specific way to handle this, as such a
CVE cannot be given to the RFC (currently CVEs will be given to
RFCs/protocols that say "do something bad" like using weak encryption
algorithms).

As such it was left up to all the IKE implementations themselves to
determine what to do with respect to retransmits.

I think it's safe to say an amplification of 1:10 or more qualifies as a
problem, I'm not sure what the exact amplification ratio to qualify for a
CVE is (1:3, 1:7?) but I think 1:10 or more should definitely qualify.

Thus a lot of other IKE implementations will be needing CVEs for this class
of problem (as well as other protocols).

[saag] Fwd: [oss-security] Re: CVE Request: IKEv1… Jeffrey Walton