CVE-2006-2298

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-10 · updated 2026-06-16

Description

The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Affected products

Internet Key Exchange: 1

References

http://secunia.com/advisories/20050
http://securitytracker.com/id?1016043
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
http://www.securityfocus.com/bid/17902
http://www.vupen.com/english/advisories/2006/1733
https://exchange.xforce.ibmcloud.com/vulnerabilities/26311
http://secunia.com/advisories/20050
http://securitytracker.com/id?1016043
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/

Get alerted when CVE-2006-2298 or the next vulnerability affects your stack