Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-4047
HistoryMay 22, 2015 - 12:00 a.m.

CVE-2015-4047

2015-05-2200:00:00
ubuntu.com
ubuntu.com
8

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.018 Low

EPSS

Percentile

88.1%

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a
denial of service (NULL pointer dereference and IKE daemon crash) via a
series of crafted UDP requests.

Bugs

Notes

Author Note
sbeattie reported against ipsec-tools 0.8.2
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchipsec-tools< 1:0.8.0-9ubuntu1.1UNKNOWN
ubuntu14.04noarchipsec-tools< 1:0.8.0-14+deb7u1ubuntu0.1UNKNOWN

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.018 Low

EPSS

Percentile

88.1%