[SECURITY] [DLA 234-1] ipsec-tools security update

2015-05-3010:37:43

lists.debian.org

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.018 Low

EPSS

Percentile

88.0%

JSON

Package : ipsec-tools
Version : 1:0.7.3-12+deb6u1
CVE ID : CVE-2015-4047
Debian Bug : 785778

Javantea discovered a NULL pointer dereference flaw in racoon, the
Internet Key Exchange daemon of ipsec-tools. A remote attacker can use
this flaw to cause the IKE daemon to crash via specially crafted UDP
packets, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Debian6allipsec-tools< 1:0.7.3-12+deb6u1ipsec-tools_1:0.7.3-12+deb6u1_all.deb
Debian6allracoon< 1:0.7.3-12+deb6u1racoon_1:0.7.3-12+deb6u1_all.deb