CVE-2004-0392

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-06-14 · updated 2026-06-16

Description

racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

Affected products

Kame Racoon: through 2004-04-07a

References

http://orange.kame.net/dev/query-pr.cgi?pr=555
http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/15893
http://orange.kame.net/dev/query-pr.cgi?pr=555
http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/15893

Get alerted when CVE-2004-0392 or the next vulnerability affects your stack