CVE-2006-2298: Internet Key Exchange

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.

Affected products

• Internet Key Exchange Internet Key Exchange: version 1 only

Published 2006-05-10. Last modified 2026-06-16.