CVE-2004-0221: OpenBSD

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.

Affected products

• OpenBSD OpenBSD: up to and including 3.4

Published 2004-05-04. Last modified 2026-06-16.