CVE-2015-4047

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-4047
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

7.8 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.html Mailing List Third Party Advisory
http://packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2015/May/81 Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2015/May/83 Exploit Mailing List Third Party Advisory
http://www.debian.org/security/2015/dsa-3272 Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/05/20/1 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/05/21/11 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/74739 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032397 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2623-1 Third Party Advisory
https://support.f5.com/csp/article/K05013313 Third Party Advisory
https://www.altsci.com/ipsec/ipsec-tools-sa.html Exploit Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.html Mailing List Third Party Advisory
http://packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2015/May/81 Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2015/May/83 Exploit Mailing List Third Party Advisory
http://www.debian.org/security/2015/dsa-3272 Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/05/20/1 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/05/21/11 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/74739 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032397 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2623-1 Third Party Advisory
https://support.f5.com/csp/article/K05013313 Third Party Advisory
https://www.altsci.com/ipsec/ipsec-tools-sa.html Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ipsec-tools:ipsec-tools:0.8.2:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*

Configuration 7 (hide)

OR cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*

Configuration 8 (hide)

OR cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*

Configuration 9 (hide)

OR cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*

Configuration 10 (hide)

OR cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*

Configuration 11 (hide)

OR cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*

Configuration 12 (hide)

OR cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*

Configuration 13 (hide)

OR cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*

Configuration 14 (hide)

OR cpe:2.3:a:f5:big-ip_protocol_security_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_adc:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:enterprise_manager:*:*:*:*:*:*:*:*

Configuration 15 (hide)

OR cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
History

21 Nov 2024, 02:30

Type Values Removed Values Added
References () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html - Mailing List, Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html - Mailing List, Third Party Advisory
References () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.html - Mailing List, Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.html - Mailing List, Third Party Advisory
References () http://packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html - Third Party Advisory, VDB Entry
References () http://seclists.org/fulldisclosure/2015/May/81 - Exploit, Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2015/May/81 - Exploit, Mailing List, Third Party Advisory
References () http://seclists.org/fulldisclosure/2015/May/83 - Mailing List, Exploit, Third Party Advisory () http://seclists.org/fulldisclosure/2015/May/83 - Exploit, Mailing List, Third Party Advisory
References () http://www.debian.org/security/2015/dsa-3272 - Third Party Advisory () http://www.debian.org/security/2015/dsa-3272 - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2015/05/20/1 - Mailing List, Exploit, Third Party Advisory () http://www.openwall.com/lists/oss-security/2015/05/20/1 - Exploit, Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2015/05/21/11 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2015/05/21/11 - Mailing List, Third Party Advisory
References () http://www.securityfocus.com/bid/74739 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/74739 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1032397 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1032397 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-2623-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-2623-1 - Third Party Advisory
References () https://support.f5.com/csp/article/K05013313 - Third Party Advisory () https://support.f5.com/csp/article/K05013313 - Third Party Advisory
References () https://www.altsci.com/ipsec/ipsec-tools-sa.html - Exploit, Third Party Advisory () https://www.altsci.com/ipsec/ipsec-tools-sa.html - Exploit, Third Party Advisory
Information

Published : 2015-05-29 15:59

Updated : 2024-11-21 02:30

NVD link : CVE-2015-4047

Mitre link : CVE-2015-4047

CVE.ORG link : CVE-2015-4047

JSON object : View

Products Affected

f5

  • big-ip_application_security_manager
  • big-iq_security
  • big-ip_global_traffic_manager
  • big-ip_domain_name_system
  • big-ip_link_controller
  • big-iq_centralized_management
  • big-ip_edge_gateway
  • big-ip_wan_optimization_manager
  • enterprise_manager
  • big-ip_policy_enforcement_manager
  • big-ip_analytics
  • big-iq_cloud
  • big-ip_application_acceleration_manager
  • big-ip_webaccelerator
  • big-iq_device
  • big-iq_cloud_and_orchestration
  • big-ip_local_traffic_manager
  • big-iq_adc
  • big-ip_advanced_firewall_manager
  • big-ip_access_policy_manager
  • big-ip_protocol_security_manager

debian

  • debian_linux

canonical

  • ubuntu_linux

ipsec-tools

  • ipsec-tools

fedoraproject

  • fedora
CWE
CWE-476

NULL Pointer Dereference