CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.043

EPSS Ranking 88.2%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2009-1632

Ipsec-Tools » Ipsec-Tools » Version: Any

cpe:2.3:a:ipsec-tools:ipsec-tools:*
Ipsec-Tools » Ipsec-Tools » Version: 0.1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.1
Ipsec-Tools » Ipsec-Tools » Version: 0.2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2
Ipsec-Tools » Ipsec-Tools » Version: 0.2.1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.1
Ipsec-Tools » Ipsec-Tools » Version: 0.2.2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.2
Ipsec-Tools » Ipsec-Tools » Version: 0.2.3

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.3
Ipsec-Tools » Ipsec-Tools » Version: 0.2.4

cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.4
Ipsec-Tools » Ipsec-Tools » Version: 0.3

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3
Ipsec-Tools » Ipsec-Tools » Version: 0.3.1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1
Ipsec-Tools » Ipsec-Tools » Version: 0.3.2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2
Ipsec-Tools » Ipsec-Tools » Version: 0.3.3

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc1
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc2
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc3

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc3
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc4

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc4
Ipsec-Tools » Ipsec-Tools » Version: 0.3_rc5

cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc5
Ipsec-Tools » Ipsec-Tools » Version: 0.4

cpe:2.3:a:ipsec-tools:ipsec-tools:0.4
Ipsec-Tools » Ipsec-Tools » Version: 0.5

cpe:2.3:a:ipsec-tools:ipsec-tools:0.5
Ipsec-Tools » Ipsec-Tools » Version: 0.5.1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.1
Ipsec-Tools » Ipsec-Tools » Version: 0.5.2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.2
Ipsec-Tools » Ipsec-Tools » Version: 0.6

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6
Ipsec-Tools » Ipsec-Tools » Version: 0.6.1

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.1
Ipsec-Tools » Ipsec-Tools » Version: 0.6.2

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.2
Ipsec-Tools » Ipsec-Tools » Version: 0.6.3

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.3
Ipsec-Tools » Ipsec-Tools » Version: 0.6.4

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.4
Ipsec-Tools » Ipsec-Tools » Version: 0.6.5

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.5
Ipsec-Tools » Ipsec-Tools » Version: 0.6.6

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.6
Ipsec-Tools » Ipsec-Tools » Version: 0.6.7

cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.7
Ipsec-Tools » Ipsec-Tools » Version: 0.7

cpe:2.3:a:ipsec-tools:ipsec-tools:0.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1632

Products

Pricing

Contact Us