Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)

Summary #

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

Impact: If exploitable, this could allow an unauthenticated remote attacker to cause a buffer overflow condition in the IKE daemon, potentially resulting in a denial-of-service condition; however, internal verification against a fixed build using a reconstructed proof-of-concept did not reproduce an iked crash.