Comments (9)
The version of ike-scan that's currently in Ubuntu (1.9) does not have this issue.
from ike-scan.
Thanks for reporting this issue. I can reproduce it on my development system running Debian Jessie, so it looks like a regression since the last official release.
root@jessie:/home/rsh/ike-scan# gdb ./ike-scan
GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/.
Find the GDB manual and other documentation resources online at:
http://www.gnu.org/software/gdb/documentation/.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from ./ike-scan...done.
(gdb) run 192.168.124.0/24
Starting program: /home/rsh/ike-scan/ike-scan 192.168.124.0/24
Program received signal SIGSEGV, Segmentation fault.
add_host (name=name@entry=0x7ffffffed380 "192.168.124.0",
timeout=timeout@entry=500, num_hosts=num_hosts@entry=0x7ffffffed538,
cookie_data=cookie_data@entry=0x0,
cookie_data_len=cookie_data_len@entry=0, numeric_only=numeric_only@entry=1)
at ike-scan.c:1331
1331 memcpy(&(he->addr), hp->h_addr_list[0], sizeof(struct in_addr));
(gdb)
from ike-scan.
If you start the tool with -N (or --nodns), then it works as expected.
In line 1328, the wrong flag is evaluated. Then it's trying to take the IP from a null pointer and segfaults of course.
from ike-scan.
Hopefully fixed by commit c1a31cf
from ike-scan.
This bug appears to still be in effect. I'm working with ike-scan 1.9.4 on the latest Kali Linux Rolling and get a segfault anytime I try to scan an IP address range.
Per the comment from dfelsch earlier, the -N option is an effective workaround.
from ike-scan.
I can't reproduce this bug after commit c1a31cf
sudo ./ike-scan 192.168.1.0/24
runs without error on the latest git version on Debian Buster and I expect it will run on other OSes as well because the range/netmask code is not OS dependent.
Have you tried using the latest version from github? Please do let me know if that errors as well because it really shouldn't.
from ike-scan.
Ah! My apologies: you are correct that the latest version from GitHub does not have this bug. I put too much faith in the notion that Kali's version 1.9.4 is equivalent to the 1.9.4 in GitHub.
from ike-scan.
Thanks for the confirmation. I'll increment the version number to make it clear that there has been significant change since 1.9.4.
from ike-scan.
Confirmed as fixed. Version incremented to 1.9.5 and corresponding tag created.
from ike-scan.
Related Issues (20)
- Can ike-scan be used to detect the cisco asa ike buffer overflow? HOT 5
- Use of ike-vendor-ids in other (open-source) programs HOT 4
- malformed test fails on big endian HOT 1
- Malformed README.md markdown HOT 1
- New backoff fingerprints for SoftEther
- autoreconf --install HOT 1
- How to set the "Proposal number"?
- common prime detection
- Current stable?
- make check fails with coredump HOT 1
- Move wiki to new URL
- No makefile generated using ./configure --with-openssl HOT 1
- the tar file does not contain configure HOT 1
- Any plans for IPv6 support? HOT 1
- Ikev2 HOT 19
- Remove $Id$ tags HOT 3
- Tagged release
- Modern algorithms not automatically detected?
- Supplying nonsense transformation parameters lacks a "not supported feedback"
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ike-scan.