Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2008-3652
HistoryAug 13, 2008 - 1:41 a.m.

CVE-2008-3652

2008-08-1301:41:00
Debian Security Bug Tracker
security-tracker.debian.org
8

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

src/racoon/handler.c in racoon in ipsec-tools does not remove an β€œorphaned ph1” (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).

OSVersionArchitecturePackageVersionFilename
Debian9allipsec-tools<Β 1:0.8.2+20140711-8+deb9u1ipsec-tools_1:0.8.2+20140711-8+deb9u1_all.deb

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C