CVE-2004-0392 in racoon

Riassunto

di MITRE

racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 13/04/2004
• Divulgazione: 14/06/2004
• Moderazione: accettato
• Voce: VDB-21901
• CPE: pronto
• CWE: CWE-835 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.02492
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0392
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0392
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0392/