CVE-2008-3652

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle...

7.8 HighFix available

CVE-2008-3652 is a high vulnerability (CVSS 7.8) in Ipsec-tools, published August 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 88th percentile. Fixed in ipsec-tools 0:0.2.5-0.7.rhel3.5.

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).

Exploit likelihood

3.44%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2008-3652
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-3652
Updated: 2026-11-02

EUVDEUVD-2008-3638 0.0

Record: EUVD-2008-3638
CVSS: 0.0 NoneAV:N/AC:L/Au:N/C:N/I:N/A:C
Updated: 2026-11-02

GitHub AdvisoriesGHSA-5pvr-hrvj-wq9p No score

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle...

Record: GHSA-5pvr-hrvj-wq9p
Updated: 2026-11-02

Affected products

ipsec-tools

Affected packages

Affected packages
Package	Affected	Fixed
`ipsec-tools` Red Hat:enterprise_linux:3::as	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:3::as	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools` Red Hat:enterprise_linux:3::desktop	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools` Red Hat:enterprise_linux:3::es	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:3::es	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools` Red Hat:enterprise_linux:3::ws	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:0.2.5-0.7.rhel3.5	0:0.2.5-0.7.rhel3.5
`ipsec-tools` Red Hat:enterprise_linux:4::as	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:4::as	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7

Show 10 moreShow less

Affected packages
Package	Affected	Fixed
`ipsec-tools` Red Hat:enterprise_linux:4::desktop	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7
`ipsec-tools` Red Hat:enterprise_linux:4::es	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:4::es	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7
`ipsec-tools` Red Hat:enterprise_linux:4::ws	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:0.3.3-7.el4_7	0:0.3.3-7.el4_7
`ipsec-tools` Red Hat:enterprise_linux:5::client	before 0:0.6.5-9.el5_2.3	0:0.6.5-9.el5_2.3
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:5::client	before 0:0.6.5-9.el5_2.3	0:0.6.5-9.el5_2.3
`ipsec-tools` Red Hat:enterprise_linux:5::server	before 0:0.6.5-9.el5_2.3	0:0.6.5-9.el5_2.3
`ipsec-tools-debuginfo` Red Hat:enterprise_linux:5::server	before 0:0.6.5-9.el5_2.3	0:0.6.5-9.el5_2.3

History

History
When	Changed	Sources
2026-11-02	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 32 moreShow less