CVE-2008-3652
Fixed in a distro release EPSS 3%
src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).
Products: ipsec-tools
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | ipsec-tools | 0:0.2.5-0.7.rhel3.5 |
| Red Hat Enterprise Linux 3 | ipsec-tools-debuginfo | 0:0.2.5-0.7.rhel3.5 |
| Red Hat Enterprise Linux 4 | ipsec-tools | 0:0.3.3-7.el4_7 |
| Red Hat Enterprise Linux 4 | ipsec-tools-debuginfo | 0:0.3.3-7.el4_7 |
| Red Hat Enterprise Linux 5 | ipsec-tools | 0:0.6.5-9.el5_2.3 |
| Red Hat Enterprise Linux 5 | ipsec-tools-debuginfo | 0:0.6.5-9.el5_2.3 |