Fortinet advises that its FortiGate security appliances, FortiManager systems, and FortiClient Host Security software products are vulnerable against the recent IKE ISAKMP (VU#226364) vulnerabilities. The recent IKE vulnerabilities were initially discovered by Oulu University in Finland's Secure Programming Group (OUSPG), which has developed a PROTOS ISAKMP Test Suite for IKEv1 Phase 1 and employed it to validate its findings against a number of products from different vendors. By applying the OUSPG PROTOS ISAKMP Test Suite to a variety of products, several vulnerabilities can be revealed that can have varying effects.
Products Affected:
Fortinet products confirmed to contain the similar flaws include FortiOS 2.50, 2.80 and 3.0; FortiClient 2.0; and FortiManager 2.80 and 3.0.
Impact on Fortinet Customers:
The impact of this vulnerability causes denial of service (DoS) of IPSec services. (Internal IKE process can crash due to failed range check of some IPSec attributes, but IKE will be restarted automatically by FortiOS.) Other services in FortiOS are not affected.
Risk:
High risk on FortiGate and FortiManager systems if IPSec VPN is required by the customer. No impact on customers that do not use IPSec services. Very low risk on FortiClient.
Workaround:
No workaround aside from not using IPSec services.
Solution:
Apply upgrade patches available from Fortinet Technical Support.
