CVE-2009-1632

Опубликовано: 14 мая 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*

Версия до 0.7.1 (включая)

cpe:2.3:a:ipsec-tools:ipsec-tools:0.1:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc1:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc2:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc3:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc4:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc5:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc1:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc2:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc3:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc4:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc5:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:rc1:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.2:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.3:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.4:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.5:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.6:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.7:*:*:*:*:*:*:*

cpe:2.3:a:ipsec-tools:ipsec-tools:0.7:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04307

Низкий

5 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2009-1632

ubuntu

около 16 лет назад

CVE-2009-1632

redhat

около 16 лет назад

CVE-2009-1632

debian

около 16 лет назад

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attacke ...

GHSA-r3x2-g3qw-mvq3

github

около 3 лет назад

ELSA-2009-1036

oracle-oval

около 16 лет назад

ELSA-2009-1036: ipsec-tools security update (IMPORTANT)

EPSS

Процентиль: 88%

0.04307

Низкий

5 Medium

CVSS2

Дефекты

CWE-399