CVE-2015-4047

High

Published: 29/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

In IPsec-Tools version 0.8.2, a vulnerability allows remote attackers to cause the IKE daemon to crash by sending a series of crafted UDP requests, leading to a NULL pointer dereference.

Risk Assessment

Attackers can exploit this vulnerability to disrupt service operation, potentially causing downtime in systems using IPsec-Tools.

Recommendation

It is recommended to upgrade to a newer version of IPsec-Tools to mitigate this vulnerability and to monitor UDP traffic for potential attacks.

Other vulnerabilities in IPsec-Tools 0.8.2

CVE-2016-10396High
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. An attacker can exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a specific order.

Original NVD description (English source)

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.