CVE-2015-4047: canonical ubuntu_linux NULL Pointer Dereference
Vulnerability summary
CVE-2015-4047 is a high (CVSS 7.8) NULL Pointer Dereference vulnerability in canonical ubuntu_linux. EPSS estimates a 9.73% chance of exploitation in the next 30 days, higher than 95.4% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 29-05-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
9.73%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
-0.08 pp
From 9.81% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (altsci.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
F521 products
- big-ip_access_policy_manager≥ 11.0.0, ≤ 11.6.4 | ≥ 12.0.0, ≤ 12.1.4 | 13.0.0
- big-ip_advanced_firewall_manager≥ 11.3.0, ≤ 11.6.4 | ≥ 12.0.0, ≤ 12.1.4 | 13.0.0
- big-ip_analytics≥ 11.0.0, ≤ 11.6.4 | ≥ 12.0.0, ≤ 12.1.4 | 13.0.0
- big-ip_application_acceleration_manager≥ 11.4.0, ≤ 11.6.4 | ≥ 12.0.0, ≤ 12.1.4 | 13.0.0
- big-ip_application_security_manager≥ 11.0.0, ≤ 11.6.4 | ≥ 12.0.0, ≤ 12.1.4 | 13.0.0
Suse5 products
- ipsec-tools&distro=SUSE Linux Enterprise Server 11 SP3< 0.7.3-1.13.1
- ipsec-tools&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 0.7.3-1.13.1
- ipsec-tools&distro=SUSE Linux Enterprise Server 11 SP4< 0.7.3-1.13.1
- ipsec-tools&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP3< 0.7.3-1.13.1
- ipsec-tools&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 0.7.3-1.13.1
Debian2 products
- ipsec-tools< 1:0.7.3-12+deb6u1 | < 1:0.8.0-14+deb7u1 | < 1:0.8.2+20140711-2+deb8u1
- debian_linuxEOL7.0 | 8.0 | 9.0
Canonical1 product
- ubuntu_linuxEOL12.04
Fedoraproject1 product
- fedoraEOL20 | 21
Ipsec-tools1 product
- ipsec-tools0.8.2
Mageia1 product
- ipsec-tools< 0.8.1-2.1.mga4
Ubuntu1 product
- ipsec-tools< 1:0.8.0-14+deb7u1ubuntu0.1
8 vendors · 33 products
References
23 links
- seclists.org/fulldisclosure/2015/May/83Mailing ListX Refsource FULLDISCExploitThird Party AdvisoryREPORT
- lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2015/May/81Mailing ListX Refsource FULLDISCExploitThird Party AdvisoryREPORT
- lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2015/05/20/1Mailing ListX Refsource MLISTExploitThird Party AdvisoryREPORT
- packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.htmlX Refsource MISCThird Party AdvisoryVDB Entry
Show all 23 references
- bugzilla.suse.com/931989REPORT
- bugzilla.suse.com/939810REPORT