oss-sec mailing list archives

Re: CVE Request (ipsec-tools)

From: "Steven M. Christey" <coley () linus mitre org>
Date: Tue, 12 Aug 2008 20:32:26 -0400 (EDT)


======================================================
Name: CVE-2008-3651
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3651
Reference: MLIST:[ipsec-tools-devel] 20080724 Ipsec-tools 0.7.1 released
Reference: URL:http://marc.info/?l=ipsec-tools-devel&m=121688914101709&w=2
Reference: CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=456660

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools
before 0.7.1 allows remote authenticated users to cause a denial of
service (memory consumption) via invalid proposals.

Current thread:

CVE Request (ipsec-tools) Josh Bressers (Aug 11)
- Re: CVE Request (ipsec-tools) Steven M. Christey (Aug 12)