| Package | Affected versions | Patched versions |
|---|---|---|
| ipsec-tools | = 0.5= 0.5.1= 0.5.2= 0.6= 0.6.1= 0.6.2 |
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free