CVE-2008-3651

Published: Aug 13, 2008Modified: Apr 23, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.

Affected (12)

Products: Linux: Ipsec Tools Racoon Daemon

Linux

1 product

Ipsec Tools Racoon Daemon

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Linux Ipsec Tools Racoon Daemon	Version 0.2.2
Linux Ipsec Tools Racoon Daemon	Version 0.2.5
Linux Ipsec Tools Racoon Daemon	Version 0.3.3
Linux Ipsec Tools Racoon Daemon	Version 0.5.1
Linux Ipsec Tools Racoon Daemon	Version 0.5.2
Linux Ipsec Tools Racoon Daemon	Version 0.5
Linux Ipsec Tools Racoon Daemon	Version 0.6.4
Linux Ipsec Tools Racoon Daemon	Version 0.6.5
Linux Ipsec Tools Racoon Daemon	Version 0.6.6
Linux Ipsec Tools Racoon Daemon	Version 0.6.7
Linux Ipsec Tools Racoon Daemon	Version 0.6
Linux Ipsec Tools Racoon Daemon	Version 0.7

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (56)

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Source: secalert@redhat.com

http://marc.info/?l=ipsec-tools-devel&m=121688914101709&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/31450

Source: secalert@redhat.com

http://secunia.com/advisories/31624

Source: secalert@redhat.com

http://secunia.com/advisories/32759

Source: secalert@redhat.com

http://secunia.com/advisories/32971

Source: secalert@redhat.com

http://secunia.com/advisories/35074

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200812-03.xml

Source: secalert@redhat.com

http://sourceforge.net/mailarchive/message.php?msg_name=20080724084529.GA3768%40zen.inc

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?release_id=615380&group_id=74601

Source: secalert@redhat.com

http://support.apple.com/kb/HT3549

Source: secalert@redhat.com

http://support.apple.com/kb/HT3639

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:181

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0849.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/30657

Source: secalert@redhat.com

http://www.securitytracker.com/id?1020667

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-641-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2008/2345

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2844

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1297

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1621

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=456660

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/44395

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10453

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html