Racoon vulnerabilities

2008-09-0800:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.099 Low

EPSS

Percentile

94.8%

JSON

Releases

Ubuntu 8.04
Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.06

Packages

ipsec-tools -

Details

It was discovered that there were multiple ways to leak memory during the
IKE negotiation when handling certain packets. If a remote
attacker sent repeated malicious requests, the “racoon” key exchange
server could allocate large amounts of memory, possibly leading to a
denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchracoon< 1:0.6.7-1.1ubuntu1.1UNKNOWN
Ubuntu8.04noarchipsec-tools< 1:0.6.7-1.1ubuntu1.1UNKNOWN
Ubuntu7.10noarchracoon< 1:0.6.6-3.1ubuntu3.1UNKNOWN
Ubuntu7.10noarchipsec-tools< 1:0.6.6-3.1ubuntu3.1UNKNOWN
Ubuntu7.04noarchracoon< 1:0.6.6-3ubuntu3.1UNKNOWN
Ubuntu7.04noarchipsec-tools< 1:0.6.6-3ubuntu3.1UNKNOWN
Ubuntu6.06noarchracoon< 1:0.6.5-4ubuntu1.2UNKNOWN
Ubuntu6.06noarchipsec-tools< 1:0.6.5-4ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	racoon	< 1:0.6.7-1.1ubuntu1.1	UNKNOWN
Ubuntu	8.04	noarch	ipsec-tools	< 1:0.6.7-1.1ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	racoon	< 1:0.6.6-3.1ubuntu3.1	UNKNOWN
Ubuntu	7.10	noarch	ipsec-tools	< 1:0.6.6-3.1ubuntu3.1	UNKNOWN
Ubuntu	7.04	noarch	racoon	< 1:0.6.6-3ubuntu3.1	UNKNOWN
Ubuntu	7.04	noarch	ipsec-tools	< 1:0.6.6-3ubuntu3.1	UNKNOWN
Ubuntu	6.06	noarch	racoon	< 1:0.6.5-4ubuntu1.2	UNKNOWN
Ubuntu	6.06	noarch	ipsec-tools	< 1:0.6.5-4ubuntu1.2	UNKNOWN