CyberSec.Space Logo
Back to CVE Browser

CVE-2009-1574

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.1710%
EPSS Percentile10.06th
PublishedMay 6, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.

Affected Platforms (CPE)

📦
Ipsec Tools

Ipsec Tools

<= 0.7.1
📦
Ipsec Tools

Ipsec Tools

= 0.1
📦
Ipsec Tools

Ipsec Tools

= 0.2
📦
Ipsec Tools

Ipsec Tools

= 0.2.1
📦
Ipsec Tools

Ipsec Tools

= 0.2.2
📦
Ipsec Tools

Ipsec Tools

= 0.2.3
📦
Ipsec Tools

Ipsec Tools

= 0.2.4
📦
Ipsec Tools

Ipsec Tools

= 0.3
📦
Ipsec Tools

Ipsec Tools

= 0.3
📦
Ipsec Tools

Ipsec Tools

= 0.3
📦
Ipsec Tools

Ipsec Tools

= 0.3
📦
Ipsec Tools

Ipsec Tools

= 0.3
📦
Ipsec Tools

Ipsec Tools

= 0.3
📦
Ipsec Tools

Ipsec Tools

= 0.3.1
📦
Ipsec Tools

Ipsec Tools

= 0.3.2
📦
Ipsec Tools

Ipsec Tools

= 0.3.3
📦
Ipsec Tools

Ipsec Tools

= 0.4
📦
Ipsec Tools

Ipsec Tools

= 0.4
📦
Ipsec Tools

Ipsec Tools

= 0.5
📦
Ipsec Tools

Ipsec Tools

= 0.6.1
📦
Ipsec Tools

Ipsec Tools

= 0.6.2
📦
Ipsec Tools

Ipsec Tools

= 0.6.3
📦
Ipsec Tools

Ipsec Tools

= 0.6.4
📦
Ipsec Tools

Ipsec Tools

= 0.6.5
📦
Ipsec Tools

Ipsec Tools

= 0.6.6
📦
Ipsec Tools

Ipsec Tools

= 0.7

References & Advisories

🔗 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
🔗 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
🔗 http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
🔗 http://secunia.com/advisories/35113
🔗 http://secunia.com/advisories/35153
🔗 http://secunia.com/advisories/35159
🔗 http://secunia.com/advisories/35212

Related Vulnerabilities

CVE-2008-36527.8

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remote...

CVE-2015-40477.8

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon...

CVE-2005-37327.8

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in a...

CVE-2016-103967.5

The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing IS...