CVE-2009-1574

racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.

Published: May 6, 2009
Updated: Apr 13, 2023
CVE: CVE-2009-1574
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ipsec-tools / ipsec-tools	0.2.4	0.2.4.x
ipsec-tools / ipsec-tools	0.4-rc1	0.4-rc1.x
ipsec-tools / ipsec-tools	0.5	0.5.x
ipsec-tools / ipsec-tools	0.3-rc3	0.3-rc3.x
ipsec-tools / ipsec-tools	0.3-rc5	0.3-rc5.x
ipsec-tools / ipsec-tools	0.6.2	0.6.2.x
ipsec-tools / ipsec-tools	0.6.5	0.6.5.x
ipsec-tools / ipsec-tools	0.3.2	0.3.2.x
ipsec-tools / ipsec-tools	0.7	0.7.x
ipsec-tools / ipsec-tools	0.6.1	0.6.1.x
ipsec-tools / ipsec-tools	0.6.3	0.6.3.x
ipsec-tools / ipsec-tools	0.3.3	0.3.3.x
ipsec-tools / ipsec-tools	0.2	0.2.x
ipsec-tools / ipsec-tools	0.3.1	0.3.1.x
ipsec-tools / ipsec-tools	0.3-rc2	0.3-rc2.x
ipsec-tools / ipsec-tools	0.2.1	0.2.1.x
ipsec-tools / ipsec-tools	0.3-rc4	0.3-rc4.x
ipsec-tools / ipsec-tools	0.2.2	0.2.2.x
ipsec-tools / ipsec-tools	0.2.3	0.2.3.x
ipsec-tools / ipsec-tools	0.4	0.4.x
ipsec-tools / ipsec-tools	0.1	0.1.x
ipsec-tools / ipsec-tools	0.6.4	0.6.4.x
ipsec-tools / ipsec-tools	-	0.7.1.x
ipsec-tools / ipsec-tools	0.3	0.3.x
ipsec-tools / ipsec-tools	0.3-rc1	0.3-rc1.x
ipsec-tools / ipsec-tools	0.6.6	0.6.6.x

Vulnerability Database

289,599

CVE-2009-1574