CVE-2009-1574: ipsec-tools

EPSS trend

Probability

11.63%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.63% on 19-09-2026

19-09-202619-10-2026

EPSS score

11.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
exploit-databasedosmultipleVerified
IPsec-Tools < 0.7.2 (racoon frag-isakmp) - Multiple Remote Denial of Service Vulnerabilities (PoC)
Maturity: poc

References

28 links

exchange.xforce.ibmcloud.com/vulnerabilities/50412VDB EntryX Refsource XF
www.ubuntu.com/usn/USN-785-1Vendor AdvisoryX Refsource UBUNTU
sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611X Refsource CONFIRM
secunia.com/advisories/35159Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-May/msg00789.htmlVendor AdvisoryX Refsource FEDORA
www.openwall.com/lists/oss-security/2009/04/29/6Mailing ListX Refsource MLISTPatch
www.securityfocus.com/bid/34765VDB EntryX Refsource BID
www.redhat.com/support/errata/RHSA-2009-1036.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/35113Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9624VDB EntrySignatureX Refsource OVAL

Show all 28 references

secunia.com/advisories/35404Third Party AdvisoryX Refsource SECUNIA
www.openwall.com/lists/oss-security/2009/05/04/3Mailing ListX Refsource MLISTPatch
secunia.com/advisories/35212Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=497990X Refsource CONFIRMExploitPatch
lists.apple.com/archives/security-announce/2010//Dec/msg00001.htmlVendor AdvisoryX Refsource APPLE
security.gentoo.org/glsa/glsa-200905-03.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/35685Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-May/msg00746.htmlVendor AdvisoryX Refsource FEDORA
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlVendor AdvisoryX Refsource SUSE
support.apple.com/kb/HT4298X Refsource CONFIRM
www.vupen.com/english/advisories/2009/3184VDB EntryX Refsource VUPEN
kb.juniper.net/InfoCenter/index?page=content&id=JSA10705X Refsource CONFIRM
secunia.com/advisories/35153Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-May/msg00725.htmlVendor AdvisoryX Refsource FEDORA
lists.apple.com/archives/security-announce/2009/Nov/msg00000.htmlVendor AdvisoryX Refsource APPLE
www.debian.org/security/2009/dsa-1804Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDVSA-2009:112Vendor AdvisoryX Refsource MANDRIVA
support.apple.com/kb/HT3937X Refsource CONFIRM

Related vulnerabilities

CVE-2015-4047canonicalubuntu_linux+329.73%11y ago29-05-2015 15:00racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.CVE-2007-1841debianipsec-tools+32.85%19y ago10-04-2007 22:00The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.CVE-2016-10396debianipsec-tools+92.93%9y ago06-07-2017 01:00The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.CVE-2005-0398altlinuxalt_linux+82.43%21y ago26-03-2005 05:00The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.CVE-2005-3732debianipsec-tools+34.44%20y ago21-11-2005 22:00The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.CVE-2004-0607ipsec-toolsipsec-tools+55.44%22y ago30-06-2004 04:00The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

All vulnerabilities inipsec-tools

CVE-2009-1574: ipsec-tools

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References