CVE-2004-0392
First published: Thu May 06 2004(Updated: )
racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| KAME Racoon | <=2004-04-07a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-0392?
CVE-2004-0392 is classified as a denial of service vulnerability that can lead to dropped connections.
How do I fix CVE-2004-0392?
To address CVE-2004-0392, upgrade to a version of KAME racoon released after 2004-04-07a that contains the necessary security patches.
What specific conditions trigger the vulnerability in CVE-2004-0392?
The vulnerability in CVE-2004-0392 is triggered by the arrival of an IKE message containing a malformed Generic Payload Header.
Which versions of KAME racoon are affected by CVE-2004-0392?
KAME racoon versions prior to 2004-04-07a are affected by CVE-2004-0392.
What happens if my system is exploited through CVE-2004-0392?
Exploitation of CVE-2004-0392 can cause an infinite loop leading to a denial of service, impacting service availability.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/status
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- status/reserved
- vendor/kame
- canonical/kame racoon
- version/kame racoon/2004-04-07a