racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipsec-tools | Ipsec-tools | 0.8.2 (including) | 0.8.2 (including) |
| Ipsec-tools | Ubuntu | precise | * |
| Ipsec-tools | Ubuntu | trusty | * |
| Ipsec-tools | Ubuntu | upstream | * |
| Ipsec-tools | Ubuntu | utopic | * |
| Ipsec-tools | Ubuntu | vivid | * |