CVE-2008-3652: Ipsec-Tools

High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days.

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).

Affected products

• Ipsec-Tools Ipsec-Tools: any version

Published 2008-08-13. Last modified 2026-06-16.