CVE-2015-4047: Null Pointer Dereference

Q: What is the severity of CVE-2015-4047?

CVE-2015-4047 has a high severity rating due to its potential to cause a denial of service through a NULL pointer dereference and crash of the IKE daemon.

Q: How do I fix CVE-2015-4047?

To fix CVE-2015-4047, update your IPsec-Tools to a version later than 0.8.2 that addresses this vulnerability.

Q: Which software is affected by CVE-2015-4047?

CVE-2015-4047 affects IPsec-Tools version 0.8.2 and several versions of F5 BIG-IP products, Ubuntu Linux 12.04, and various Debian releases.

Q: Can CVE-2015-4047 be exploited remotely?

Yes, CVE-2015-4047 can be exploited by remote attackers through a series of crafted UDP requests.

Q: What happens if I am affected by CVE-2015-4047?

If affected by CVE-2015-4047, your system may experience crashes of the IKE daemon, leading to service disruption.

Published May 29, 2015

Updated

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

Affected Software

45 affected components

Ipsec-tools Ipsec-tools=0.8.2

Canonical Ubuntu Linux=12.04

Fedoraproject Fedora=20

Fedoraproject Fedora=21

F5 Big-ip Application Acceleration Manager>=11.4.0<=11.6.4

F5 Big-ip Application Acceleration Manager>=12.0.0<=12.1.4

F5 Big-ip Application Acceleration Manager=13.0.0

F5 Big-ip Local Traffic Manager>=11.0.0<=11.6.4

F5 Big-ip Local Traffic Manager>=12.0.0<=12.1.4

F5 Big-ip Local Traffic Manager=13.0.0

F5 BIG-IP Advanced Firewall Manager>=11.3.0<=11.6.4

F5 BIG-IP Advanced Firewall Manager>=12.0.0<=12.1.4

F5 BIG-IP Advanced Firewall Manager=13.0.0

F5 BIG-IP Analytics>=11.0.0<=11.6.4

F5 BIG-IP Analytics>=12.0.0<=12.1.4

F5 BIG-IP Analytics=13.0.0

F5 BIG-IP Access Policy Manager>=11.0.0<=11.6.4

F5 BIG-IP Access Policy Manager>=12.0.0<=12.1.4

F5 BIG-IP Access Policy Manager=13.0.0

F5 BIG-IP Application Security Manager>=11.0.0<=11.6.4

F5 BIG-IP Application Security Manager>=12.0.0<=12.1.4

F5 BIG-IP Application Security Manager=13.0.0

F5 Big-ip Domain Name System>=12.0.0<=12.1.4

F5 Big-ip Domain Name System=13.0.0

F5 BIG-IP Edge Gateway>=11.0.0<=11.3.0

F5 Big-ip Global Traffic Manager>=11.0.0<=11.6.4

F5 Big-ip Link Controller>=11.0.0<=11.6.4

F5 Big-ip Link Controller>=12.0.0<=12.1.4

F5 Big-ip Link Controller=13.0.0

F5 Big-ip Policy Enforcement Manager>=11.3.0<=11.6.4

F5 Big-ip Policy Enforcement Manager>=12.0.0<=12.1.4

F5 Big-ip Policy Enforcement Manager=13.0.0

F5 Big-ip Protocol Security Manager>=11.0.0<=11.4.1

F5 Big-ip Wan Optimization Manager>=11.0.0<=11.3.0

F5 Big-ip Webaccelerator>=11.0.0<=11.3.0

F5 BIG-IQ ADC=4.5.0

F5 BIG-IQ Centralized Management=4.6.0

F5 BIG-IQ Cloud>=4.0.0<=4.5.0

F5 BIG-IQ Cloud and Orchestration=1.0.0

F5 BIG-IQ Device>=4.2.0<=4.5.0

F5 BIG-IQ Security>=4.0.0<=4.5.0

F5 Enterprise Manager>=3.0.0<=3.1.1

Debian Debian Linux=7.0

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Event History

May 29, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4047?

CVE-2015-4047 has a high severity rating due to its potential to cause a denial of service through a NULL pointer dereference and crash of the IKE daemon.

How do I fix CVE-2015-4047?

To fix CVE-2015-4047, update your IPsec-Tools to a version later than 0.8.2 that addresses this vulnerability.

Which software is affected by CVE-2015-4047?

CVE-2015-4047 affects IPsec-Tools version 0.8.2 and several versions of F5 BIG-IP products, Ubuntu Linux 12.04, and various Debian releases.

Can CVE-2015-4047 be exploited remotely?

Yes, CVE-2015-4047 can be exploited by remote attackers through a series of crafted UDP requests.

What happens if I am affected by CVE-2015-4047?