Approved changes feed: RSS · Atom

cpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIpsec Tools (835dc0b2-a27f-5c1a-bcec-faf101acf643)
ProductIpsec Tools (ace2deb5-63d5-52fd-8783-f2230638aca0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1632 vulnerable 2026-06-08 04:51:24.267922 Details available
Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.
Published: 2009-05-14T17:00:00.000Z
Updated: 2024-08-07T05:20:34.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1574 vulnerable 2026-06-08 04:51:24.024536 Details available
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
Published: 2009-05-06T17:00:00.000Z
Updated: 2024-08-07T05:20:33.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3652 vulnerable 2026-06-08 04:50:35.842469 Details available
src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).
Published: 2008-08-13T01:00:00.000Z
Updated: 2025-03-27T15:38:13.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1841 vulnerable 2026-06-08 04:49:43.586049 Details available
The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.
Published: 2007-04-10T22:00:00.000Z
Updated: 2024-08-07T13:13:41.684Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.