IPsec-Tools' racoon is affected by a remote Denial of Service vulnerability.
|Package||net-firewall/ipsec-tools on all architectures|
|Affected versions||< 0.7.1|
|Unaffected versions||>= 0.7.1|
IPsec-Tools is a port of KAME's implementation of the IPsec utilities. It contains a collection of network monitoring tools, including racoon, ping, and ping6.
Two Denial of Service vulnerabilities have been reported in racoon:
An attacker could exploit these vulnerabilities to cause a Denial of Service.
There is no known workaround at this time.
All IPsec-Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-firewall/ipsec-tools-0.7.1"
December 02, 2008
December 02, 2008: 01