CVE-2005-3732: ipsec-tools Resource Management Errors

EPSS trend

Probability

4.44%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.44% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

33 links

cvs.sourceforge.net/viewcvs.py/…X Refsource MISCPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9857VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/18616Third Party AdvisoryX Refsource SECUNIA
www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=enX Refsource MISC
secunia.com/advisories/20210Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/15523VDB EntryX Refsource BIDPatch
sourceforge.net/mailarchive/forum.php?thread_id=9017454&forum_id=32000Mailing ListX Refsource MLISTARTICLE
securitytracker.com/id?1015254VDB EntryX Refsource SECTRACK
www.debian.org/security/2006/dsa-965Vendor AdvisoryX Refsource DEBIAN
archives.neohapsis.com/archives/bugtraq/2005-12/0161.htmlMailing ListX Refsource BUGTRAQ

Show all 33 references

secunia.com/advisories/18742Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200512-04.xmlVendor AdvisoryX Refsource GENTOO
www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/X Refsource MISC
rhn.redhat.com/errata/RHSA-2006-0267.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/19833Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17668Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/archive/1/436343/100/0/threadedVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/18115Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17822Third Party AdvisoryX Refsource SECUNIAVendor Advisory
usn.ubuntu.com/221-1/Vendor AdvisoryX Refsource UBUNTU
www.mandriva.com/security/advisories?name=MDKSA-2006:020Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/17980Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2005/2521VDB EntryX Refsource VUPENVendor Advisory
www.novell.com/linux/security/advisories/2005_70_ipsec.htmlVendor AdvisoryX Refsource SUSE
access.redhat.com/errata/RHSA-2006:0267Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=173841REPORT
bugzilla.redhat.com/show_bug.cgi?id=181605REPORT
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0267.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-3732REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617837REPORT
www.cve.org/CVERecord?id=CVE-2005-3732Advisory
nvd.nist.gov/vuln/detail/CVE-2005-3732Advisory

Related vulnerabilities

CVE-2015-4047canonicalubuntu_linux+329.73%11y ago29-05-2015 15:00racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.CVE-2007-1841debianipsec-tools+32.85%19y ago10-04-2007 22:00The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.CVE-2016-10396debianipsec-tools+92.93%9y ago06-07-2017 01:00The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.CVE-2005-0398altlinuxalt_linux+82.43%21y ago26-03-2005 05:00The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.CVE-2004-0607ipsec-toolsipsec-tools+55.44%22y ago30-06-2004 04:00The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.CVE-2009-1632ipsec-toolsipsec-tools2.02%17y ago14-05-2009 17:00Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.

All vulnerabilities inipsec-tools

CVE-2005-3732: ipsec-tools Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References