CVE-2008-3651

Upstream information

CVE-2008-3651 at MITRE

Description

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	4
Vector	AV:N/AC:L/Au:S/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Low
Authentication	Single
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entries: 416905 [RESOLVED / FIXED], 434748 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SR:2008:025, published Fri, 14 Nov 2008 15:00:00 +0000
• SUSE-SR:2009:004, published Tue, 17 Feb 2009 10:00:00 +0000

---

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 06:36:09 2013
CVE page last modified: Fri Dec 8 16:27:36 2023