alpine · CVE-2015-4047

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2015-4047: 1 source package rows (ipsec-tools); 2 state rows across 2 repos (3.11-main, 3.12-main); fixed 0, open 2.

Description:

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.