Description
The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | ipsec-tools | 0.3.3-6 | RHSA-2005:232 |
| RHEL 3 | ipsec-tools | 0.2.5-0.7 | RHSA-2005:232 |
Advisories 1
- RHSA-2005:232 Red Hat Security Advisory: ipsec-tools security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view
- MDKSA-2005:062 vendor-advisory
- GLSA-200503-33 vendor-advisory
- racoon-isakmp-header-dos(19707) vdb-entry
- 12804 vdb-entry
- ADV-2005-0264 vdb-entry
- [ipsec-tools-devel] 20050312 potential remote crash in racoon mailing-list
- 14584 third-party-advisory
- RHSA-2005:232 vendor-advisory
- oval:org.mitre.oval:def:10028 vdb-entry signature
- 1013433 vdb-entry