Description
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
References
- 1723 vdb-entry
- 20000925 Nmap Protocol Scanning DoS against OpenBSD IPSEC mailing-list
- 1574 vdb-entry
- openbsd-nmap-dos(5634) vdb-entry