imPC@ndo IT

Tracker / CVE-2015-4047

CVE-2015-4047

High 7.8

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

Affected products and versions

canonical ubuntu_linux
debian debian_linux
f5 big-ip_access_policy_manager
f5 big-ip_access_policy_manager · 11.0.0 → 11.6.4
f5 big-ip_access_policy_manager · 12.0.0 → 12.1.4
f5 big-ip_advanced_firewall_manager
f5 big-ip_advanced_firewall_manager · 11.3.0 → 11.6.4
f5 big-ip_advanced_firewall_manager · 12.0.0 → 12.1.4
f5 big-ip_analytics
f5 big-ip_analytics · 11.0.0 → 11.6.4
f5 big-ip_analytics · 12.0.0 → 12.1.4
f5 big-ip_application_acceleration_manager
f5 big-ip_application_acceleration_manager · 11.4.0 → 11.6.4
f5 big-ip_application_acceleration_manager · 12.0.0 → 12.1.4
f5 big-ip_application_security_manager
f5 big-ip_application_security_manager · 11.0.0 → 11.6.4
f5 big-ip_application_security_manager · 12.0.0 → 12.1.4
f5 big-ip_domain_name_system
f5 big-ip_domain_name_system · 12.0.0 → 12.1.4
f5 big-ip_edge_gateway · 11.0.0 → 11.3.0
f5 big-ip_global_traffic_manager · 11.0.0 → 11.6.4
f5 big-ip_link_controller
f5 big-ip_link_controller · 11.0.0 → 11.6.4
f5 big-ip_link_controller · 12.0.0 → 12.1.4
f5 big-ip_local_traffic_manager
f5 big-ip_local_traffic_manager · 11.0.0 → 11.6.4
f5 big-ip_local_traffic_manager · 12.0.0 → 12.1.4
f5 big-ip_policy_enforcement_manager
f5 big-ip_policy_enforcement_manager · 11.3.0 → 11.6.4
f5 big-ip_policy_enforcement_manager · 12.0.0 → 12.1.4
f5 big-ip_protocol_security_manager · 11.0.0 → 11.4.1
f5 big-ip_wan_optimization_manager · 11.0.0 → 11.3.0
f5 big-ip_webaccelerator · 11.0.0 → 11.3.0
f5 big-iq_adc
f5 big-iq_centralized_management
f5 big-iq_cloud · 4.0.0 → 4.5.0
f5 big-iq_cloud_and_orchestration
f5 big-iq_device · 4.2.0 → 4.5.0
f5 big-iq_security · 4.0.0 → 4.5.0
f5 enterprise_manager · 3.0.0 → 3.1.1
fedoraproject fedora
ipsec-tools ipsec-tools

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References