CVE-2016-10396
Fixed in a distro release EPSS 3%
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.
Products: ipsec-tools
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | ipsec-tools | 1:0.8.0-14+deb7u2 |
| SUSE Linux Enterprise Server 11 SP4 | ipsec-tools | 0.7.3-1.38.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | ipsec-tools | 0.8.0-19.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | ipsec-tools | 0.8.0-19.3.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | ipsec-tools | 0.8.0-19.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | ipsec-tools | 0.7.3-1.38.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ipsec-tools | 0.8.0-19.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ipsec-tools | 0.8.0-19.3.1 |
| Ubuntu 16.04 LTS | ipsec-tools | no fix |
| Ubuntu 18.04 LTS | ipsec-tools | 1:0.8.2+20140711-10 |