IPsec-Tools: racoon Denial of service

IPsec-Tools: racoon Denial of service IPsec-Tools' racoon is affected by a remote Denial of Service vulnerability. IPsec-Tools 2005-03-25 2005-03-25 84479 remote 0.4-r1 0.5-r1 0.5-r1

IPsec-Tools is a port of KAME's implementation of the IPsec utilities. It contains a collection of network monitoring tools, including racoon, ping, and ping6.

Sebastian Krahmer has reported a potential remote Denial of Service vulnerability in the ISAKMP header parsing code of racoon.

An attacker could possibly cause a Denial of Service of racoon using a specially crafted ISAKMP packet.

There is no known workaround at this time.

All IPsec-Tools users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-firewall/ipsec-tools-0.4-r1"

CAN-2005-0398 ipsec-tools-devel posting jaervosz koon vorlon078