Red Hat Security AdvisoryRHSA-2009:1036
ipsec-tools security update
Released 2009-05-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ipsec-tools-0.6.5-13.el5_3.1, ipsec-tools-0.6.5-13.el5_3.1.i386, ipsec-tools-0.6.5-13.el5_3.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) ipsec-tools-0.6.5-13.el5_3.1, ipsec-tools-0.6.5-13.el5_3.1.i386
Fixes 2 records
Priority LOW 36
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.11631 · Published 2009-05-06 · Fixed
Priority LOW 27
Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificat…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02017 · Published 2009-05-14 · Partial fix CWE-399
