CVE-2008-3651

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-08-13 · updated 2026-06-16
Weakness: CWE-200

Description

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.

Affected products

Linux Ipsec Tools Racoon Daemon: 0.2.2, 0.2.5, 0.3.3, 0.5, 0.5.1, 0.5.2 (+6)

References

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://marc.info/?l=ipsec-tools-devel&m=121688914101709&w=2
http://secunia.com/advisories/31450
http://secunia.com/advisories/31624
http://secunia.com/advisories/32759
http://secunia.com/advisories/32971
http://secunia.com/advisories/35074
http://security.gentoo.org/glsa/glsa-200812-03.xml
http://sourceforge.net/mailarchive/message.php?msg_name=20080724084529.GA3768%40zen.inc

Get alerted when CVE-2008-3651 or the next vulnerability affects your stack