CVE-2007-1841: ipsec-tools

EPSS trend

Probability

2.85%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

0.00 pp

From 2.85% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

28 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10504VDB EntrySignatureX Refsource OVAL
security.gentoo.org/glsa/glsa-200705-09.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/bid/23394VDB EntryX Refsource BID
www.vupen.com/english/advisories/2007/1310VDB EntryX Refsource VUPEN
secunia.com/advisories/25322Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-450-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/24826Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:084Vendor AdvisoryX Refsource MANDRIVA
exchange.xforce.ibmcloud.com/vulnerabilities/33541VDB EntryX Refsource XF
sourceforge.net/project/shownotes.php?release_id=499192&group_id=74601X Refsource CONFIRM

Show all 28 references

secunia.com/advisories/24815Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1018086VDB EntryX Refsource SECTRACK
sourceforge.net/mailarchive/message.php?msg_name=20070406123739.GA1546%40zen.incMailing ListX Refsource MLISTPatchVendor Advisory
secunia.com/advisories/25560Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_8_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/24833Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1299Vendor AdvisoryX Refsource DEBIAN
rhn.redhat.com/errata/RHSA-2007-0342.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/25072Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25142Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2007:0342Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=235388REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0342.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-1841REPORT
bugzilla.redhat.com/show_bug.cgi?id=238052REPORT
www.cve.org/CVERecord?id=CVE-2007-1841Advisory
nvd.nist.gov/vuln/detail/CVE-2007-1841Advisory

Related vulnerabilities

CVE-2015-4047canonicalubuntu_linux+329.73%11y ago29-05-2015 15:00racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.CVE-2016-10396debianipsec-tools+92.93%9y ago06-07-2017 01:00The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.CVE-2005-0398altlinuxalt_linux+82.43%21y ago26-03-2005 05:00The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.CVE-2005-3732debianipsec-tools+34.44%20y ago21-11-2005 22:00The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.CVE-2004-0607ipsec-toolsipsec-tools+55.44%22y ago30-06-2004 04:00The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.CVE-2009-1632ipsec-toolsipsec-tools2.02%17y ago14-05-2009 17:00Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.

All vulnerabilities inipsec-tools

CVE-2007-1841: ipsec-tools

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References