[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXHvHJkYzDfTSE2Kzd3v8_dwgRTHT_SC0tEs4EHp01yc":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":75,"topProductsByCves":76,"seoMetadata":78,"meta":87},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},15075,"ipsec-tools",1,9,0,29,"2017-07-06","i",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},91535,"Ipsec-tools is a technology vendor with 1 tracked product and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36,43,48,53,59,65,70],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2009-1574","racoon\u002Fisakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.","2009-05-06",5,"v2","Medium",false,0.11631,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":35},"CVE-2015-4047","racoon\u002Fgssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.","2015-05-29",7.8,"High",0.0973,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":25,"severity":41,"isKev":27,"epssScore":42},"CVE-2004-0607","The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.","2004-12-06",10,"Critical",0.0544,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":47},"CVE-2005-3732","The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.","2005-11-21",0.04444,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":52},"CVE-2008-3652","src\u002Fracoon\u002Fhandler.c in racoon in ipsec-tools does not remove an \"orphaned ph1\" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).","2008-08-13",0.03435,{"cveId":54,"description":55,"publishedDate":13,"cvssScore":56,"cvssVersion":57,"severity":34,"isKev":27,"epssScore":58},"CVE-2016-10396","The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.",7.5,"v3.0",0.02928,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":64},"CVE-2007-1841","The isakmp_info_recv function in src\u002Fracoon\u002Fisakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.","2007-04-10",4.3,0.02851,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":69},"CVE-2005-0398","The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.","2005-03-14",0.02433,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":74},"CVE-2009-1632","Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src\u002Fracoon\u002Fcrypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src\u002Fracoon\u002Fnattraversal.c.","2009-05-14",0.02017,[],[77],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":79,"metaDescription":80,"keywords":81,"structuredData":82},"Ipsec-tools - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ipsec-tools covering 1 product with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ipsec-tools vulnerabilities, Ipsec-tools security, Ipsec-tools CVE, Ipsec-tools threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":83,"@type":84,"name":85,"description":80,"url":86},"https:\u002F\u002Fschema.org","Organization","Ipsec-tools","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fipsec-tools",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":88,"apiVersion":89},"2026-10-17T15:07:19.014Z","3.0"]