Lucene search
K

2808 matches found

Cisco
Cisco
added 2015/06/02 9:27 p.m.23 views

Cisco Adaptive Security Appliance XAUTH Bypass Vulnerability

A vulnerability in Internet Key Exchange IKE version 1 v1 code of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to bypass Extended Authentication XAUTH and successfully log in via IPsec remote VPN. The vulnerability is due to improper implementation ...

4CVSS6.6AI score0.02026EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/06/02 12:0 a.m.25 views

Ubuntu 12.04 LTS : ipsec-tools vulnerability (USN-2623-1)

It was discovered that racoon, the ipsec-tools IKE daemon, incorrectly handled certain UDP packets. A remote attacker could use this issue to cause racoon to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the...

7.8CVSS7.2AI score0.09798EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2015/06/01 4:58 p.m.55 views

USN-2623-1: ipsec-tools vulnerability

It was discovered that racoon, the ipsec-tools IKE daemon, incorrectly handled certain UDP packets. A remote attacker could use this issue to cause racoon to crash, resulting in a denial of service...

7.8CVSS7.3AI score0.09798EPSS
Exploits1
securityvulns
securityvulns
added 2015/06/01 12:0 a.m.37 views

ipsec-tools DoS

NULL pointer dereference on UDP packet parsing...

7.8CVSS3.8AI score0.09798EPSS
Exploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/06/01 12:0 a.m.24 views

Debian DLA-234-1 : ipsec-tools security update

Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted UDP packets, resulting in a denial of service. NOTE: Tenable Network Security has extracted th...

7.8CVSS7.2AI score0.09798EPSS
Exploits1References3
Debian
Debian
added 2015/05/30 10:37 a.m.22 views

[SECURITY] [DLA 234-1] ipsec-tools security update

Package : ipsec-tools Version : 1:0.7.3-12+deb6u1 CVE ID : CVE-2015-4047 Debian Bug : 785778 Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted U...

7.8CVSS7.3AI score0.09798EPSS
Exploits1
OSV
OSV
added 2015/05/30 12:0 a.m.12 views

DLA-234-1 ipsec-tools - security update

Bulletin has no description...

7.8CVSS6.3AI score0.09798EPSS
Exploits1
NVD
NVD
added 2015/05/29 3:59 p.m.13 views

CVE-2015-4047

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a series of crafted UDP requests...

7.8CVSS6.3AI score0.09798EPSS
Exploits1References13
AlpineLinux
AlpineLinux
added 2015/05/29 3:59 p.m.26 views

CVE-2015-4047

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a series of crafted UDP requests...

7.8CVSS5.4AI score0.09798EPSS
Exploits1
Prion
Prion
added 2015/05/29 3:59 p.m.20 views

Null pointer dereference

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a series of crafted UDP requests...

7.8CVSS6.9AI score0.09798EPSS
Exploits1References13Affected Software25
Cvelist
Cvelist
added 2015/05/29 3:0 p.m.27 views

CVE-2015-4047

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon crash via a series of crafted UDP requests...

6.2AI score0.09798EPSS
Exploits1References13
CVE
CVE
added 2015/05/29 3:0 p.m.92 views

CVE-2015-4047

The CVE-2015-4047 vulnerability affects ipsec-tools, specifically the racoon daemon's code path in racoon/gssapi.c. A remote attacker can send crafted UDP requests to trigger a NULL pointer dereference, causing the IKE daemon to crash and resulting in DoS. The issue is associated with IPsec-Tools...

7.8CVSS6.3AI score0.09798EPSS
Exploits1References13Affected Software1
Debian CVE
Debian CVE
added 2015/05/29 3:0 p.m.31 views

CVE-2015-4047

Removed by vendor...

7.8CVSS7.4AI score0.09798EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2015/05/26 12:0 a.m.32 views

Debian DSA-3272-1 : ipsec-tools - security update

Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted UDP packets, resulting in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...

7.8CVSS7.2AI score0.09798EPSS
Exploits1References5
CNVD
CNVD
added 2015/05/26 12:0 a.m.1 views

IPsec-Tools Null Pointer Reference Denial of Service Vulnerability

IPsec-Tools is a user-space implementation of different IPSecs ported from KAME's libipsec, setkey and racoon, and supports various BSD systems. A null pointer reference vulnerability exists in IPsec-Tools, which allows remote attackers to crash an application by submitting a special request...

6.9AI score
Exploits0References1
CNVD
CNVD
added 2015/05/26 12:0 a.m.3 views

IPsec-Tools IKE Daemon Remote Denial of Service Vulnerability

IPsec-Tools is a user-space implementation of different IPSecs ported from KAME's libipsec, setkey and racoon, and supports various BSD systems. A null pointer reference error in the IPsec-Tools 'gssapiinit' function src/racoon/gssapi.c allows a remote attacker to submit special UDP packets that...

7.8CVSS7AI score0.09798EPSS
Exploits1References1
Debian
Debian
added 2015/05/23 2:36 p.m.17 views

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...

7.8CVSS5.9AI score0.09798EPSS
Exploits1
Debian
Debian
added 2015/05/23 2:36 p.m.26 views

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...

7.8CVSS2.3AI score0.09798EPSS
Exploits1
OpenVAS
OpenVAS
added 2015/05/23 12:0 a.m.21 views

Debian Security Advisory DSA 3272-1 (ipsec-tools - security update)

Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted UDP packets, resulting in a denial of service. OpenVAS Vulnerability Test $Id: deb3272.nasl 66...

7.8CVSS0.1AI score0.09798EPSS
Exploits1References1
OSV
OSV
added 2015/05/23 12:0 a.m.22 views

DSA-3272-1 ipsec-tools - security update

Bulletin has no description...

7.8CVSS7.4AI score0.09798EPSS
Exploits1
Rows per page
Query Builder