Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-1632HistoryMay 14, 2009 - 5:30 p.m.
CVE-2009-1632
2009-05-1417:30:00
Debian Security Bug Tracker
security-tracker.debian.org
6
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | ipsec-tools | < 1:0.8.2+20140711-8+deb9u1 | ipsec-tools_1:0.8.2+20140711-8+deb9u1_all.deb |
Related
prion
prion
Design/Logic Flaw
2009-05-14 17:30:00
openvas
openvas
IPSec-Tools Memory Leakage Vulnerability
2009-05-18 00:00:00
Mandrake Security Advisory MDVSA-2009:114 (ipsec-tools)
2009-05-25 00:00:00
SLES9: Security update for ipsec-tools
2009-10-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:38:13
securityvulns
securityvulns
[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools
2009-05-19 00:00:00
ipsec-tools DoS
2009-05-19 00:00:00
ubuntucve
ubuntucve
CVE-2009-1632
2009-05-14 00:00:00
cve
cve
CVE-2009-1632
2009-05-14 17:30:00
nessus
nessus
SuSE9 Security Update : ipsec-tools (YOU Patch Number 12438)
2009-09-24 00:00:00
Debian DSA-1804-1 : ipsec-tools - NULL pointer dereference, memory leaks
2009-05-22 00:00:00
openSUSE 10 Security Update : ipsec-tools (ipsec-tools-6302)
2009-06-25 00:00:00
exploitdb
exploitdb
IPsec-Tools < 0.7.2 - Multiple Remote Denial of Service Vulnerabilities
2009-11-09 00:00:00
oraclelinux
oraclelinux
ipsec-tools security update
2009-05-18 00:00:00
ubuntu
ubuntu
ipsec-tools vulnerabilities
2009-06-09 00:00:00
osv
osv
ipsec-tools - denial of service
2009-05-20 00:00:00
redhat
redhat
(RHSA-2009:1036) Important: ipsec-tools security update
2009-05-18 00:00:00
centos
centos
ipsec security update
2009-05-19 15:04:50
debian
debian
[SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service
2009-05-20 14:06:43
gentoo
gentoo
IPSec Tools: Denial of service
2009-05-24 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related for DEBIANCVE:CVE-2009-1632