CVE-2009-1574
NoneCVSS
—
EPSS
11.6%
Published
May 6, 2009
CISA due date
—
The record
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | ipsec-tools | 0 | 1:0.6.6-3.1etch3 |
| Debian:5.0 | ipsec-tools | 0 | 1:0.7.1-1.3+lenny2 |
| Red Hat:enterprise_linux:5::client | ipsec-tools | 0 | 0:0.6.5-13.el5_3.1 |
| Red Hat:enterprise_linux:5::client | ipsec-tools-debuginfo | 0 | 0:0.6.5-13.el5_3.1 |
| Red Hat:enterprise_linux:5::server | ipsec-tools | 0 | 0:0.6.5-13.el5_3.1 |
| Red Hat:enterprise_linux:5::server | ipsec-tools-debuginfo | 0 | 0:0.6.5-13.el5_3.1 |