CVE-2016-10396
ipsec-tools: The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing a...
CVE-2016-10396 is fixed in 2 products on 1 platform, first by ipsec-tools 1:0.8.2+20140711-10, released July 4, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0293
87th percentile
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ipsec-tools · Ubuntu 18.04.6 LTS (bionic) | 1:0.8.2+20140711-10 | ipsec-tools 1:0.8.2+20140711-10 | Jul 4, 2017 |
| racoon · Ubuntu 18.04.6 LTS (bionic) | 1:0.8.2+20140711-10 | racoon 1:0.8.2+20140711-10 | Jul 4, 2017 |