The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_linux | Redhat | as_4 (including) | as_4 (including) |
| Enterprise_linux | Redhat | es_4 (including) | es_4 (including) |
| Enterprise_linux | Redhat | ws_4 (including) | ws_4 (including) |
| Enterprise_linux_desktop | Redhat | 4 (including) | 4 (including) |