CVE-2005-0398

6 documents6 sources
Severity
5.0MEDIUM
EPSS
4.1%
top 11.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Altlinux ALT LinuxIpsec-tools Ipsec-toolsKame Racoon+4 more
Timeline
PublishedMar 14
Latest updateMay 1

Description

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages6 packages

▶NVDkame/racoon14 versions+13
▶NVDipsec-tools/ipsec-tools0.3.3, 0.5+1
▶NVDsgi/propack3.0
▶NVDsuse/suse_linux9.1, 9.2+1

Also affects: Enterprise Linux 3.0, 4.0

Patches

Patch: secunia.com ↗Patch: security.gentoo.org ↗Patch: securitytracker.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-87q5-cpgj-vj92: The KAME racoon daemon in ipsec-tools before 0↗2022-05-01
▶
CVEList
CVE-2005-0398: The KAME racoon daemon in ipsec-tools before 0↗2005-03-26
▶

📋Vendor Advisories

2
Ubuntu
racoon vulnerability↗2005-04-06
▶
Red Hat
security flaw↗2005-03-09
▶

💬Community

1
Bugzilla
CVE-2005-0398 security flaw↗2018-08-16
▶