CVE-2015-4047 : racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial o

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

Published 2015-05-29 15:59:19

Updated 2019-03-27 18:04:37

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2015-4047

Debian » Debian Linux » Version: 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Local Traffic Manager
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Local Traffic Manager
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Local Traffic Manager » Version: 13.0.0
cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Global Traffic Manager
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Application Security Manager
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Application Security Manager
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Application Security Manager » Version: 13.0.0
cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Enterprise Manager
Versions from including (>=) 3.0.0 and up to, including, (<=) 3.1.1
cpe:2.3:a:f5:enterprise_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Access Policy Manager
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Access Policy Manager
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Access Policy Manager » Version: 13.0.0
cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Webaccelerator
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.3.0
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Wan Optimization Manager
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.3.0
cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Edge Gateway
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.3.0
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Link Controller
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Link Controller
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Link Controller » Version: 13.0.0
cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Analytics
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Analytics
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Analytics » Version: 13.0.0
cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Application Acceleration Manager
Versions from including (>=) 11.4.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Application Acceleration Manager
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Application Acceleration Manager » Version: 13.0.0
cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Advanced Firewall Manager
Versions from including (>=) 11.3.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Advanced Firewall Manager
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Advanced Firewall Manager » Version: 13.0.0
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Policy Enforcement Manager
Versions from including (>=) 11.3.0 and up to, including, (<=) 11.6.4
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Policy Enforcement Manager
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Policy Enforcement Manager » Version: 13.0.0
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-iq Security
Versions from including (>=) 4.0.0 and up to, including, (<=) 4.5.0
cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-iq Cloud
Versions from including (>=) 4.0.0 and up to, including, (<=) 4.5.0
cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-iq Device
Versions from including (>=) 4.2.0 and up to, including, (<=) 4.5.0
cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-iq Adc » Version: 4.5.0
cpe:2.3:a:f5:big-iq_adc:4.5.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-iq Centralized Management » Version: 4.6.0
cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Domain Name System
Versions from including (>=) 12.0.0 and up to, including, (<=) 12.1.4
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Domain Name System » Version: 13.0.0
cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-iq Cloud And Orchestration » Version: 1.0.0
cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*
Matching versions
F5 » Big-ip Protocol Security Manager
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.4.1
cpe:2.3:a:f5:big-ip_protocol_security_manager:*:*:*:*:*:*:*:*
Matching versions
Ipsec-tools » Ipsec-tools » Version: 0.8.2
cpe:2.3:a:ipsec-tools:ipsec-tools:0.8.2:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 20
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 21
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-4047

EPSS FAQ

1.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 84 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-4047

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2015-4047

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-4047

http://www.openwall.com/lists/oss-security/2015/05/20/1

oss-security - CVE Request: ipsec-tools
Mailing List;Exploit;Third Party Advisory
https://support.f5.com/csp/article/K05013313

Third Party Advisory
http://seclists.org/fulldisclosure/2015/May/83

Full Disclosure: Re: 0-day Denial of Service in IPsec-Tools
Mailing List;Exploit;Third Party Advisory
http://www.securityfocus.com/bid/74739

IPsec-Tools NULL Pointer Dereference Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://www.ubuntu.com/usn/USN-2623-1

USN-2623-1: ipsec-tools vulnerability | Ubuntu security notices
Third Party Advisory
http://www.debian.org/security/2015/dsa-3272

Debian -- Security Information -- DSA-3272-1 ipsec-tools
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159549.html

[SECURITY] Fedora 21 Update: ipsec-tools-0.8.2-1.fc21
Mailing List;Third Party Advisory
https://www.altsci.com/ipsec/ipsec-tools-sa.html

IPsec-Tools 0-Day Denial of Service
Exploit;Third Party Advisory
http://seclists.org/fulldisclosure/2015/May/81

Full Disclosure: 0-day Denial of Service in IPsec-Tools
Exploit;Mailing List;Third Party Advisory
http://packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html

IPsec-Tools 0.8.2 Denial Of Service ≈ Packet Storm
Third Party Advisory;VDB Entry
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html

[SECURITY] Fedora 20 Update: ipsec-tools-0.8.2-1.fc20
Mailing List;Third Party Advisory
http://www.securitytracker.com/id/1032397

IPsec-Tools IKE Null Pointer Dereference Lets Remote Users Deny Service - SecurityTracker
Third Party Advisory;VDB Entry
http://www.openwall.com/lists/oss-security/2015/05/21/11

oss-security - Re: CVE Request: ipsec-tools
Mailing List;Third Party Advisory

Jump to

Vulnerability Details : CVE-2015-4047

Products affected by CVE-2015-4047

Exploit prediction scoring system (EPSS) score for CVE-2015-4047

CVSS scores for CVE-2015-4047

CWE ids for CVE-2015-4047

References for CVE-2015-4047