RHSA-2009:1036: Important: ipsec-tools security update
The ipsec-tools package is used in conjunction with the IPsec functionalityin the Linux kernel and includes racoon, an IKEv1 keying daemon.A denial of service flaw was found in the ipsec-tools racoon daemon. Anunauthenticated, remote attacker could trigger a NULL pointer dereferencethat could cause the racoon daemon to crash. (CVE-2009-1574)Multiple memory leak flaws were found in the ipsec-tools racoon daemon. Ifa remote attacker is able to make multiple connection attempts to theracoon daemon, it was possible to cause the racoon daemon to consume allavailable memory. (CVE-2009-1632)Users of ipsec-tools should upgrade to this updated package, which containsbackported patches to correct these issues. Users must restart the racoondaemon for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1036?
The severity of RHSA-2009:1036 is classified as important.
How do I fix RHSA-2009:1036?
To fix RHSA-2009:1036, update the ipsec-tools package to version 0.6.5-13.el5_3.1 or later.
What type of vulnerability is RHSA-2009:1036?
RHSA-2009:1036 is a denial of service vulnerability in the ipsec-tools racoon daemon.
Who is affected by RHSA-2009:1036?
RHSA-2009:1036 affects users of the ipsec-tools package version 0.6.5-13.el5_3.1 and earlier.
Can RHSA-2009:1036 be exploited remotely?
Yes, RHSA-2009:1036 can be exploited by an unauthenticated remote attacker.