CVE-2009-1574
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 12%
from disclosure to weapon7 days
Published on NVDMay 6
1st PoC+7d
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/8669⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2010//Dec/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=497990http://secunia.com/advisories/35113http://secunia.com/advisories/35153http://secunia.com/advisories/35159http://secunia.com/advisories/35212http://secunia.com/advisories/35404http://secunia.com/advisories/35685http://security.gentoo.org/glsa/glsa-200905-03.xml