Skip to content
OpenAdvisories
Unscored RHSA-2008:0849 2 CVEs

Red Hat Security Advisory: ipsec-tools security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as ipsec-tools 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 3 enterprise_linux:3::as ipsec-tools-debuginfo 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 3 enterprise_linux:3::desktop ipsec-tools 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 3 enterprise_linux:3::desktop ipsec-tools-debuginfo 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 3 enterprise_linux:3::es ipsec-tools 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 3 enterprise_linux:3::es ipsec-tools-debuginfo 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 3 enterprise_linux:3::ws ipsec-tools 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 3 enterprise_linux:3::ws ipsec-tools-debuginfo 0:0.2.5-0.7.rhel3.5
Red Hat · RHEL 4 enterprise_linux:4::as ipsec-tools 0:0.3.3-7.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as ipsec-tools-debuginfo 0:0.3.3-7.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop ipsec-tools 0:0.3.3-7.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop ipsec-tools-debuginfo 0:0.3.3-7.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es ipsec-tools 0:0.3.3-7.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es ipsec-tools-debuginfo 0:0.3.3-7.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws ipsec-tools 0:0.3.3-7.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws ipsec-tools-debuginfo 0:0.3.3-7.el4_7
Red Hat · RHEL 5 enterprise_linux:5::client ipsec-tools 0:0.6.5-9.el5_2.3
Red Hat · RHEL 5 enterprise_linux:5::client ipsec-tools-debuginfo 0:0.6.5-9.el5_2.3
Red Hat · RHEL 5 enterprise_linux:5::server ipsec-tools 0:0.6.5-9.el5_2.3
Red Hat · RHEL 5 enterprise_linux:5::server ipsec-tools-debuginfo 0:0.6.5-9.el5_2.3

Vulnerabilities 2

  • Unscored —
    CVE-2008-3651

    Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to …

  • Unscored —
    CVE-2008-3652

    src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initi…

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=456660
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458846
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0849.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-3651
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3651
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3651
  • report
    https://access.redhat.com/security/cve/CVE-2008-3652
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3652
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3652