CVE-2015-4047: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 9.7% chance of exploitation in the next 30 days.

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

Affected products

  • Canonical Ubuntu Linux: version 12.04 only
  • Debian Debian Linux: version 7.0 only; version 8.0 only; version 9.0 only
  • F5 BIG-IP Access Policy Manager: from 11.0.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Advanced Firewall Manager: from 11.3.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Analytics: from 11.0.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Application Acceleration Manager: from 11.4.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Application Security Manager: from 11.0.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Domain Name System: from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Edge Gateway: from 11.0.0, up to and including 11.3.0
  • F5 BIG-IP Global Traffic Manager: from 11.0.0, up to and including 11.6.4
  • F5 BIG-IP Link Controller: from 11.0.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Local Traffic Manager: from 11.0.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Policy Enforcement Manager: from 11.3.0, up to and including 11.6.4; from 12.0.0, up to and including 12.1.4; version 13.0.0 only
  • F5 BIG-IP Protocol Security Manager: from 11.0.0, up to and including 11.4.1
  • F5 BIG-IP WAN Optimization Manager: from 11.0.0, up to and including 11.3.0
  • F5 BIG-IP Webaccelerator: from 11.0.0, up to and including 11.3.0
  • F5 BIG-IQ ADC: version 4.5.0 only
  • F5 BIG-IQ Centralized Management: version 4.6.0 only
  • F5 BIG-IQ Cloud: from 4.0.0, up to and including 4.5.0
  • F5 BIG-IQ Cloud And Orchestration: version 1.0.0 only
  • F5 BIG-IQ Device: from 4.2.0, up to and including 4.5.0
  • F5 BIG-IQ Security: from 4.0.0, up to and including 4.5.0
  • F5 Enterprise Manager: from 3.0.0, up to and including 3.1.1
  • Fedoraproject Fedora: version 20 only; version 21 only
  • Ipsec-Tools Ipsec-Tools: version 0.8.2 only

Published 2015-05-29. Last modified 2026-06-17.