CVE-2009-1574

mediumPriorität · verfolgen · 34EPSS 0.116 · 96. PerzentilExploit · funktionalEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · funktional

Likely / severe?

11.6% (96th) EPSS

CVSS 5 · medium

Is it mine?

41 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

enisa_euvd · fstec_bdu · nvd · redhat_csaf

EPSS · bewertet 2026-10-27

racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenipsec-tools-0:0.6.5-13.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.src as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-0:0.6.5-13.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-debuginfo-0:0.6.5-13.el5_3.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-debuginfo-0:0.6.5-13.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-debuginfo-0:0.6.5-13.el5_3.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-debuginfo-0:0.6.5-13.el5_3.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-debuginfo-0:0.6.5-13.el5_3.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-debuginfo-0:0.6.5-13.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036
Behobenipsec-tools-debuginfo-0:0.6.5-13.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1036

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Psecondary · FSTEC (BDU) RU

v2.04.5mediumAV:N/AC:L/Au:N/C:N/I:N/A:P/E:POCsecondary · CVSS-BT (t0sche)

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Psecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-476US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-8669IPsec-Tools < 0.7.2 (racoon frag-isakmp) - Multiple Remote Denial of Service Vulnerabilities (PoC)funktional · exploit_db

betroffene Produkte (41)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
Gentoo Foundation Inc. Gentoo Linux≤ 10.0fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ Server 5.3.zfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ Desktop 5fstec_bduRU
The CentOS Project CentOS≤ 5fstec_bduRU
ipsec-tools ipsec-tools≤ 0.7.1nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.1nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.2nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.2.1nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.2.2nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.2.3nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.2.4nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.3nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.3.1nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.3.2nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.3.3nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.4nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.5nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.6.1nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*
ipsec-tools ipsec-tools= 0.6.2nvdUScpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*

20 von 41 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2009:1036Red Hat Security Advisory: ipsec-tools security update2009-05-18csaf · redhat_csafUS
An updated ipsec-tools package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team.

auch bekannt als (8)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2009-05-06geändert 2026-06-16

Referenzen (56)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan