GCVE-110-MAGEIA-2015-243

Advisory Published

Vulnetix · Advisory published June 8, 2015

Updated ipsec-tools packages fix security vulnerability: Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted UDP packets, resulting in a denial of service (CVE-2015-4047).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	ipsec-tools	0 (affected), 0.8.1-2.1.mga4 (unaffected)	—

Aliases

CVE-2015-4047

References

Updated ipsec-tools packages fix CVE-2015-4047

advisory

Updated ipsec-tools packages fix CVE-2015-4047

advisory

Updated ipsec-tools packages fix CVE-2015-4047

issue

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON