CVE-2009-1574
Fixed in a distro release EPSS 12%
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
Products: ipsec-tools
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | ipsec-tools | 1:0.6.6-3.1etch3 |
| Debian 5.0 | ipsec-tools | 1:0.7.1-1.3+lenny2 |
| Red Hat Enterprise Linux 5 | ipsec-tools | 0:0.6.5-13.el5_3.1 |
| Red Hat Enterprise Linux 5 | ipsec-tools-debuginfo | 0:0.6.5-13.el5_3.1 |