CVE-2009-1574

racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
ipsec-toolsipsec-tools
𝑥
≤ 0.7.1
ipsec-toolsipsec-tools
0.1
ipsec-toolsipsec-tools
0.2
ipsec-toolsipsec-tools
0.2.1
ipsec-toolsipsec-tools
0.2.2
ipsec-toolsipsec-tools
0.2.3
ipsec-toolsipsec-tools
0.2.4
ipsec-toolsipsec-tools
0.3
ipsec-toolsipsec-tools
0.3:rc1
ipsec-toolsipsec-tools
0.3:rc2
ipsec-toolsipsec-tools
0.3:rc3
ipsec-toolsipsec-tools
0.3:rc4
ipsec-toolsipsec-tools
0.3:rc5
ipsec-toolsipsec-tools
0.3.1
ipsec-toolsipsec-tools
0.3.2
ipsec-toolsipsec-tools
0.3.3
ipsec-toolsipsec-tools
0.4
ipsec-toolsipsec-tools
0.4:rc1
ipsec-toolsipsec-tools
0.5
ipsec-toolsipsec-tools
0.6.1
ipsec-toolsipsec-tools
0.6.2
ipsec-toolsipsec-tools
0.6.3
ipsec-toolsipsec-tools
0.6.4
ipsec-toolsipsec-tools
0.6.5
ipsec-toolsipsec-tools
0.6.6
ipsec-toolsipsec-tools
0.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ipsec-tools
jaunty
Fixed 1:0.7-2.1ubuntu1.9.04.1
released
intrepid
Fixed 1:0.7-2.1ubuntu1.8.10.1
released
hardy
Fixed 1:0.6.7-1.1ubuntu1.2
released
dapper
Fixed 1:0.6.5-4ubuntu1.3
released
References