Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service

Summary #

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

Impact: A remote, authenticated IKEv2 peer (a legitimate VPN user with valid credentials who has established a Child SA) can trigger a stack buffer overflow in iked, causing the process to abort (SIGABRT) and restart, resulting in a denial-of-service condition for VPN services. Because the overwritten values are server-controlled partner SPI values rather than attacker-chosen data, remote code execution is considered unlikely, though the crash and potential stack corruption of adjacent frame data (including return addresses) could not be fully ruled out.