Detections
Analytics
GLSA-200812-03 : IPsec-Tools: racoon Denial of Service
high Nessus Plugin ID 35020
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-200812-03 (IPsec-Tools: racoon Denial of Service)Two Denial of Service vulnerabilities have been reported in racoon:
The vendor reported a memory leak in racoon/proposal.c that can be triggered via invalid proposals (CVE-2008-3651).
Krzysztof Piotr Oledzk reported that src/racoon/handler.c does not remove an 'orphaned ph1' (phase 1) handle when it has been initiated remotely (CVE-2008-3652).
Impact :
An attacker could exploit these vulnerabilities to cause a Denial of Service.
Workaround :
There is no known workaround at this time.
Solution
All IPsec-Tools users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=net-firewall/ipsec-tools-0.7.1'
See Also
Plugin Details
Severity: High
ID: 35020
File Name: gentoo_GLSA-200812-03.nasl
Version: 1.16
Type: local
Family: Gentoo Local Security Checks
Published: 12/3/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/o:gentoo:linux, p-cpe:/a:gentoo:linux:ipsec-tools
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Exploit Ease: No known exploits are available
Patch Publication Date: 12/2/2008
Reference Information
CVE: CVE-2008-3651, CVE-2008-3652
BID: 30657