Vulnerability in Ipsec-Tools

CVE-2008-3652

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).

EPSS: 0.034 (87.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References