The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipsec-tools | Ipsec-tools | * | 0.6.2 (including) |
| Red Hat Enterprise Linux 5 | RedHat | ipsec-tools-0:0.6.5-8.el5 | * |
| Ipsec-tools | Ubuntu | dapper | * |
| Ipsec-tools | Ubuntu | devel | * |
| Ipsec-tools | Ubuntu | edgy | * |
| Ipsec-tools | Ubuntu | feisty | * |