Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ipsec-tools ipsec-tools vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2009-1574
racoon/isakmp_frag.c in ipsec-tools prior to 0.7.2 allows remote malicious users to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
Ipsec-tools Ipsec-tools 0.1Ipsec-tools Ipsec-tools 0.2Ipsec-tools Ipsec-tools 0.3.1Ipsec-tools Ipsec-tools 0.4Ipsec-tools Ipsec-tools 0.6.5Ipsec-tools Ipsec-tools 0.6.6Ipsec-tools Ipsec-tools 0.3Ipsec-tools Ipsec-tools 0.2.3Ipsec-tools Ipsec-tools 0.2.4Ipsec-tools Ipsec-tools 0.6.1Ipsec-tools Ipsec-tools 0.6.2Ipsec-tools Ipsec-tools 0.3.3Ipsec-tools Ipsec-tools 0.3.2Ipsec-tools Ipsec-tools 0.6.3Ipsec-tools Ipsec-tools 0.6.4Ipsec-tools Ipsec-tools 0.2.1Ipsec-tools Ipsec-tools 0.2.2Ipsec-tools Ipsec-tools 0.5Ipsec-tools Ipsec-tools 0.7Ipsec-tools Ipsec-tools
5
CVSSv2
CVE-2009-1632
Multiple memory leaks in Ipsec-tools prior to 0.7.2 allow remote malicious users to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in sr...
Ipsec-tools Ipsec-tools 0.1Ipsec-tools Ipsec-tools 0.2Ipsec-tools Ipsec-tools 0.3.2Ipsec-tools Ipsec-tools 0.3Ipsec-tools Ipsec-tools 0.3.3Ipsec-tools Ipsec-tools 0.6.3Ipsec-tools Ipsec-tools 0.3.1Ipsec-tools Ipsec-tools 0.3 Rc1Ipsec-tools Ipsec-tools 0.5Ipsec-tools Ipsec-tools 0.5.2Ipsec-tools Ipsec-tools 0.6.4Ipsec-tools Ipsec-tools 0.7Ipsec-tools Ipsec-tools 0.2.3Ipsec-tools Ipsec-tools 0.2.4Ipsec-tools Ipsec-tools 0.3 Rc3Ipsec-tools Ipsec-tools 0.6Ipsec-tools Ipsec-tools 0.6.2Ipsec-tools Ipsec-tools 0.4Ipsec-tools Ipsec-tools 0.6.7Ipsec-tools Ipsec-tools 0.6.5Ipsec-tools Ipsec-tools 0.6.6Ipsec-tools Ipsec-tools
10
CVSSv2
CVE-2004-0607
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote malicious users to bypass authentication.
Ipsec-tools Ipsec-tools 0.3Ipsec-tools Ipsec-tools 0.3.1Kame RacoonKame Racoon 2003-07-11Ipsec-tools Ipsec-tools 0.3.2Ipsec-tools Ipsec-tools 0.3 Rc1Kame Racoon 2004-04-05Kame Racoon 2004-04-07bIpsec-tools Ipsec-tools 0.3 Rc2Ipsec-tools Ipsec-tools 0.3 Rc3Kame Racoon 2004-05-03Ipsec-tools Ipsec-tools 0.3 Rc4Ipsec-tools Ipsec-tools 0.3 Rc5Redhat Enterprise Linux 3.0Redhat Enterprise Linux Desktop 3.0
4
CVSSv2
CVE-2008-3651
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools prior to 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
Linux Ipsec Tools Racoon Daemon 0.2.5Linux Ipsec Tools Racoon Daemon 0.6Linux Ipsec Tools Racoon Daemon 0.7Linux Ipsec Tools Racoon Daemon 0.2.2Linux Ipsec Tools Racoon Daemon 0.6.4Linux Ipsec Tools Racoon Daemon 0.6.7Linux Ipsec Tools Racoon Daemon 0.3.3Linux Ipsec Tools Racoon Daemon 0.6.6Linux Ipsec Tools Racoon Daemon 0.5.2Linux Ipsec Tools Racoon Daemon 0.5.1Linux Ipsec Tools Racoon Daemon 0.6.5Linux Ipsec Tools Racoon Daemon 0.5
4.3
CVSSv2
CVE-2007-1841
The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools prior to 0.6.7 allows remote malicious users to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.
Ipsec-tools Ipsec-tools
7.8
CVSSv2
CVE-2008-3652
src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote malicious users to cause a denial of service (resource consumption).
Ipsec-tools Ipsec-tools
7.8
CVSSv2
CVE-2016-10396
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote malicious user to exhaust computational resources on the remote endpoint by repeatedly sending ISA...
Ipsec-tools Ipsec-tools 0.8.2
5
CVSSv2
CVE-2005-0398
The KAME racoon daemon in ipsec-tools prior to 0.5 allows remote malicious users to cause a denial of service (crash) via malformed ISAKMP packets.
Kame Racoon 2005-01-10Kame Racoon 2005-01-17Kame Racoon 2005-03-07Sgi Propack 3.0Kame Racoon 2004-04-05Kame Racoon 2004-04-07bKame Racoon 2005-02-07Kame Racoon 2005-02-14Ipsec-tools Ipsec-tools 0.3.3Ipsec-tools Ipsec-tools 0.5Kame Racoon 2003-07-11Kame Racoon 2005-01-24Kame Racoon 2005-01-31Kame Racoon 2004-05-03Kame Racoon 2005-01-03Kame Racoon 2005-02-21Kame Racoon 2005-02-28Redhat Enterprise Linux 4.0Suse Suse Linux 9.2Altlinux Alt Linux 2.3Redhat Enterprise Linux 3.0Suse Suse Linux
7.8
CVSSv2
CVE-2005-3732
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools prior to 0.6.3, when running in aggressive mode, allows remote malicious users to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by ...
Ipsec-tools Ipsec-tools 0.5.2Ipsec-tools Ipsec-tools 0.6Ipsec-tools Ipsec-tools 0.6.1Ipsec-tools Ipsec-tools 0.6.2Ipsec-tools Ipsec-tools 0.5Ipsec-tools Ipsec-tools 0.5.1
7.8
CVSSv2
CVE-2015-4047
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote malicious users to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
Ipsec-tools Ipsec-tools 0.8.2Canonical Ubuntu Linux 12.04Fedoraproject Fedora 20Fedoraproject Fedora 21F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 13.0.0F5 Big-ip Domain Name System 13.0.0F5 Big-ip Domain Name SystemF5 Big-ip Global Traffic ManagerF5 Big-ip Edge GatewayF5 Big-ip Link ControllerF5 Big-ip Link Controller 13.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook