(RHSA-2008:0849) Important: ipsec-tools security update

2008-08-2600:00:00

access.redhat.com

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.093 Low

EPSS

Percentile

94.1%

JSON

The ipsec-tools package is used in conjunction with the IPsec functionality
in the Linux kernel and includes racoon, an IKEv1 keying daemon.

Two denial of service flaws were found in the ipsec-tools racoon daemon. It
was possible for a remote attacker to cause the racoon daemon to consume
all available memory. (CVE-2008-3651, CVE-2008-3652)

Users of ipsec-tools should upgrade to this updated package, which contains
backported patches that resolve these issues.

OSVersionArchitecturePackageVersionFilename
RedHat4srcipsec-tools< 0.3.3-7.el4_7ipsec-tools-0.3.3-7.el4_7.src.rpm
RedHat5srcipsec-tools< 0.6.5-9.el5_2.3ipsec-tools-0.6.5-9.el5_2.3.src.rpm
RedHat5ia64ipsec-tools< 0.6.5-9.el5_2.3ipsec-tools-0.6.5-9.el5_2.3.ia64.rpm
RedHat5i386ipsec-tools< 0.6.5-9.el5_2.3ipsec-tools-0.6.5-9.el5_2.3.i386.rpm
RedHat4ppcipsec-tools< 0.3.3-7.el4_7ipsec-tools-0.3.3-7.el4_7.ppc.rpm
RedHat5ppcipsec-tools< 0.6.5-9.el5_2.3ipsec-tools-0.6.5-9.el5_2.3.ppc.rpm
RedHat4ia64ipsec-tools< 0.3.3-7.el4_7ipsec-tools-0.3.3-7.el4_7.ia64.rpm
RedHat4x86_64ipsec-tools< 0.3.3-7.el4_7ipsec-tools-0.3.3-7.el4_7.x86_64.rpm
RedHat4s390xipsec-tools< 0.3.3-7.el4_7ipsec-tools-0.3.3-7.el4_7.s390x.rpm
RedHat4s390ipsec-tools< 0.3.3-7.el4_7ipsec-tools-0.3.3-7.el4_7.s390.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	src	ipsec-tools	< 0.3.3-7.el4_7	ipsec-tools-0.3.3-7.el4_7.src.rpm
RedHat	5	src	ipsec-tools	< 0.6.5-9.el5_2.3	ipsec-tools-0.6.5-9.el5_2.3.src.rpm
RedHat	5	ia64	ipsec-tools	< 0.6.5-9.el5_2.3	ipsec-tools-0.6.5-9.el5_2.3.ia64.rpm
RedHat	5	i386	ipsec-tools	< 0.6.5-9.el5_2.3	ipsec-tools-0.6.5-9.el5_2.3.i386.rpm
RedHat	4	ppc	ipsec-tools	< 0.3.3-7.el4_7	ipsec-tools-0.3.3-7.el4_7.ppc.rpm
RedHat	5	ppc	ipsec-tools	< 0.6.5-9.el5_2.3	ipsec-tools-0.6.5-9.el5_2.3.ppc.rpm
RedHat	4	ia64	ipsec-tools	< 0.3.3-7.el4_7	ipsec-tools-0.3.3-7.el4_7.ia64.rpm
RedHat	4	x86_64	ipsec-tools	< 0.3.3-7.el4_7	ipsec-tools-0.3.3-7.el4_7.x86_64.rpm
RedHat	4	s390x	ipsec-tools	< 0.3.3-7.el4_7	ipsec-tools-0.3.3-7.el4_7.s390x.rpm
RedHat	4	s390	ipsec-tools	< 0.3.3-7.el4_7	ipsec-tools-0.3.3-7.el4_7.s390.rpm