CVE-2009-1574
MEDIUM 5.0EPSS 11.6%
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P - EPSS
- 11.63% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2009-05-06
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://www.openwall.com/lists/oss-security/2009/04/29/6
- http://www.openwall.com/lists/oss-security/2009/05/04/3
- https://bugzilla.redhat.com/show_bug.cgi?id=497990
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:112
- http://www.redhat.com/support/errata/RHSA-2009-1036.html
- http://www.securityfocus.com/bid/34765
- http://www.ubuntu.com/usn/USN-785-1