[Impact]

 * xl2tpd crash with segmentation fault when disconnecting from
L2TP/IPSec VPN

 * pppd processes never reaped, user will have to manually intervene to
clean up

 * this will be a major annoyance for our users and I suggest we add
this update to the stable release.

 * the proposed debdiff fixes this problem by patching a NULL-pointer
de-reference in the upstream code.


[Test Case]

 * Set up L2TP/IPSec VPN server
   1. create a VM on your computer and install Ubuntu Xenial on it (must be VM, 
IPSec won't work in LXC)
   2. sudo apt install xl2tpd libssl-dev
   3. get and run this script: https://github.com/philpl/setup-strong-strongswan

 * Set up L2TP/IPSec VPN client
   1.  sudo add-apt-repository ppa:nm-l2tp/network-manager-l2tp
       sudo apt update
       sudo apt install network-manager-l2tp
   2.  sudo service xl2tpd stop 
(https://github.com/nm-l2tp/network-manager-l2tp/issues/38)
   3.  Configure L2TP/IPSec VPN using Network Manager GUI and point it to the 
IP of your VM
   4.  Connect
   5.  Disconnect
   6.  Observe that you see xl2tpd SIGSEGV in dmesg and that pppd is still 
running.

[Regression Potential]

 * The patch contains no change but a check for NULL before de-
referencing a pointer during cleanup.


** Bug watch added: github.com/nm-l2tp/network-manager-l2tp/issues #38
   https://github.com/nm-l2tp/network-manager-l2tp/issues/38

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1677990

Title:
  xl2tpd crash when tearing down L2TP/IPSec VPN connection

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xl2tpd/+bug/1677990/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to