CVE-2015-4047
Fixed in a distro release EPSS 10%
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
Products: ipsec-tools, canonical ubuntu_linux, fedoraproject fedora, f5 big-ip_application_acceleration_manager, f5 big-ip_local_traffic_manager, f5 big-ip_advanced_firewall_manager, f5 big-ip_analytics, f5 big-ip_access_policy_manager, f5 big-ip_application_security_manager, f5 big-ip_domain_name_system, f5 big-ip_edge_gateway, f5 big-ip_global_traffic_manager, f5 big-ip_link_controller, f5 big-ip_policy_enforcement_manager, f5 big-ip_protocol_security_manager, f5 big-ip_wan_optimization_manager, f5 big-ip_webaccelerator, f5 big-iq_adc, f5 big-iq_centralized_management, f5 big-iq_cloud, f5 big-iq_cloud_and_orchestration, f5 big-iq_device, f5 big-iq_security, f5 enterprise_manager, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | ipsec-tools | 1:0.7.3-12+deb6u1 |
| Debian 7 | ipsec-tools | 1:0.8.0-14+deb7u1 |
| Debian 8 | ipsec-tools | 1:0.8.2+20140711-2+deb8u1 |
| SUSE Linux Enterprise Server 11 SP3 | ipsec-tools | 0.7.3-1.13.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | ipsec-tools | 0.7.3-1.13.1 |
| SUSE Linux Enterprise Server 11 SP4 | ipsec-tools | 0.7.3-1.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | ipsec-tools | 0.7.3-1.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | ipsec-tools | 0.7.3-1.13.1 |
| Ubuntu 14.04 LTS | ipsec-tools | 1:0.8.0-14+deb7u1ubuntu0.1 |