| Name | CVE-2007-1841 |
| Description | The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-1299-1, DTSA-42-1 |
| Debian Bugs | 423252 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| ipsec-tools (PTS) | jessie, jessie (lts) | 1:0.8.2+20140711-2+deb8u1 | fixed |
| stretch | 1:0.8.2+20140711-8+deb9u1 | fixed |
The information below is based on the following data on fixed versions.
Notes
[sarge] - ipsec-tools <not-affected> (the older stream of development used in the sarge package is not vulnerable - a code change that went into that branch coincidentally fixed it and this change was already there in sarge)