CVE-2004-0392 in racoon

Summary

racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 04/13/2004
• Disclosure: 06/14/2004
• Moderation: VulDB entry created
• Entries: 1: VDB-21901
• CPE: ready
• CWE: CWE-835 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00928
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0392
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0392
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0392/