VULNERABILITY INTELLIGENCE
CVE-2008-3651
CVSS score4 MEDIUM
EPSS probability2.32%
CISA KEVNot currently listed
Published2008-08-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor