PRIOn knowledge basePRION:CVE-2015-4047Null pointer dereference
6.9 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.014 Low
EPSS
Percentile
86.0%
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
References
packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html
seclists.org/fulldisclosure/2015/May/81
seclists.org/fulldisclosure/2015/May/83
www.debian.org/security/2015/dsa-3272
www.openwall.com/lists/oss-security/2015/05/20/1
www.openwall.com/lists/oss-security/2015/05/21/11
www.securityfocus.com/bid/74739
www.securitytracker.com/id/1032397
www.ubuntu.com/usn/USN-2623-1
lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html
lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.html
support.f5.com/csp/article/K05013313
www.altsci.com/ipsec/ipsec-tools-sa.html
Related
6.9 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.014 Low
EPSS
Percentile
86.0%