]> The Tcpdump Group git mirrors - tcpdump/commit
CVE-2017-12990/Fix printing of ISAKMPv1 Notification payload data.
authorGuy Harris <[email protected]>
Mon, 6 Feb 2017 22:33:50 +0000 (14:33 -0800)
committerDenis Ovsienko <[email protected]>
Wed, 13 Sep 2017 11:25:44 +0000 (12:25 +0100)
commitc2ef693866beae071a24b45c49f9674af1df4028
treefc8984c901380f06a0780b1d2922ca1c700e62e4
parent50a44b6b8e4f7c127440dbd4239cf571945cc1e7
CVE-2017-12990/Fix printing of ISAKMPv1 Notification payload data.

The closest thing to a specification for the contents of the payload
data is draft-ietf-ipsec-notifymsg-04, and nothing in there says that it
is ever a complete ISAKMP message, so don't dissect types we don't have
specific code for as a complete ISAKMP message.

While we're at it, fix a comment, and clean up printing of V1 Nonce,
V2 Authentication payloads, and v2 Notice payloads.

This fixes an infinite loop discovered by Forcepoint's security
researchers Otto Airamo & Antti Levomäki.

Add a test using the capture file supplied by the reporter(s).
print-isakmp.c
tests/TESTLIST
tests/isakmp-no-none-np.out [new file with mode: 0644]
tests/isakmp-no-none-np.pcap [new file with mode: 0644]