CyberSec.Space Logo
Back to CVE Browser

CVE-2008-3652

HIGH
7.8
CVSS Severity Score
EPSS Score0.1360%
EPSS Percentile3.90th
PublishedAug 13, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).

Affected Platforms (CPE)

📦
Ipsec Tools

Ipsec Tools

All versions

References & Advisories

🔗 http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
🔗 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
🔗 http://secunia.com/advisories/31478
🔗 http://secunia.com/advisories/31624
🔗 http://secunia.com/advisories/32759
🔗 http://secunia.com/advisories/32971

Related Vulnerabilities

CVE-2015-40477.8

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon...

CVE-2005-37327.8

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in a...

CVE-2016-103967.5

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing IS...

CVE-2005-03985.0

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP...