CVE-2015-4047
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...
CVE-2015-4047 is a high vulnerability (CVSS 7.8) in Ipsec-tools, published May 22, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.73%, the 95th percentile. Fixed in ipsec-tools 1:0.7.3-12+deb6u1.
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
Exploit likelihood
What each source reports
NVD Score used
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
- Record
CVE-2015-4047- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
- Record
CVE-2015-4047- Updated
- 2026-11-02
EUVDEUVD-2015-4075 No score
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
- Record
EUVD-2015-4075- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-47jj-2hp6-grww No score
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
- Record
GHSA-47jj-2hp6-grww- Weakness
- CWE-476
- Updated
- 2026-11-02
OSVMGASA-2015-0243 No score
Updated ipsec-tools packages fix CVE-2015-4047
Updated ipsec-tools packages fix security vulnerability:
Javantea discovered a NULL pointer dereference flaw in racoon, the Internet Key Exchange daemon of ipsec-tools. A remote attacker can use this flaw to cause the IKE daemon to crash via specially crafted UDP packets, resulting in a denial of service (CVE-2015-4047).
- Record
MGASA-2015-0243- Updated
- 2026-11-02
OSVSUSE-SU-2015:1367-1 No score
Security update for ipsec-tools
ipsec-tools was updated to fix one security issue and a bug.
This security issue was fixed:
- CVE-2015-4047: racoon/gssapi.c in ipsec-tools allowed remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests (bsc#931989).
Due to a packaging error, the racoonf.conf config file was symlinked to /usr/share/doc/packages/ipsec-tools/examples/racoon/samples/racoon.conf on some processor platforms, edits might have happened only in this example file.
Before upgrading, please check if /etc/racoon/racoon.conf is a symlink to this example file and backup the content. (bsc#939810)
- Record
SUSE-SU-2015:1367-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-4047 No score
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
- Record
UBUNTU-CVE-2015-4047- Updated
- 2026-11-02
Affected products
- ipsec-tools
- canonical ubuntu linux
- debian linux
- f5 big-ip access policy manager
- f5 big-ip advanced firewall manager
- f5 big-ip analytics
- f5 big-ip application acceleration manager
- f5 big-ip application security manager
- f5 big-ip domain name system
- f5 big-ip edge gateway
- f5 big-ip global traffic manager
- f5 big-ip link controller
Show 13 moreShow less
- f5 big-ip local traffic manager
- f5 big-ip policy enforcement manager
- f5 big-ip protocol security manager
- f5 big-ip wan optimization manager
- f5 big-ip webaccelerator
- f5 big-iq adc
- f5 big-iq centralized management
- f5 big-iq cloud
- f5 big-iq cloud and orchestration
- f5 big-iq device
- f5 big-iq security
- f5 enterprise manager
- fedoraproject fedora
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ipsec-toolsDebian:6.0 |
before 1:0.7.3-12+deb6u1, plus listed versions 1:0.7.3-12 |
1:0.7.3-12+deb6u1 |
ipsec-toolsDebian:7 |
before 1:0.8.0-14+deb7u1, plus listed versions 1:0.8.0-14 |
1:0.8.0-14+deb7u1 |
ipsec-toolsDebian:8 |
before 1:0.8.2+20140711-2+deb8u1, plus listed versions 1:0.8.2+20140711-2 |
1:0.8.2+20140711-2+deb8u1 |
ipsec-toolsMageia:4 |
before 0.8.1-2.1.mga4 | 0.8.1-2.1.mga4 |
ipsec-toolsSUSE:Linux Enterprise Server 11 SP3 |
before 0.7.3-1.13.1 | 0.7.3-1.13.1 |
ipsec-toolsSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 0.7.3-1.13.1 | 0.7.3-1.13.1 |
ipsec-toolsSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 0.7.3-1.13.1 | 0.7.3-1.13.1 |
ipsec-toolsSUSE:Linux Enterprise Server 11 SP4 |
before 0.7.3-1.13.1 | 0.7.3-1.13.1 |
ipsec-toolsSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 0.7.3-1.13.1 | 0.7.3-1.13.1 |
ipsec-toolsUbuntu:14.04:LTS |
before 1:0.8.0-14+deb7u1ubuntu0.1, plus listed versions 1:0.8.0-14ubuntu31:0.8.0-14ubuntu4 |
1:0.8.0-14+deb7u1ubuntu0.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
debian.org/security/2015/dsa-3272
seclists.org/fulldisclosure/2015/May/83
lists.fedoraproject.org/pipermail/package-announce/2015-June/159482.html
altsci.com/ipsec/ipsec-tools-sa.html
Show 18 moreShow less
securitytracker.com/id/1032397
openwall.com/lists/oss-security/2015/05/20/1
securityfocus.com/bid/74739
packetstormsecurity.com/files/131992/IPsec-Tools-0.8.2-Denial-Of-Service.html
ubuntu.com/usn/USN-2623-1
support.f5.com/csp/article/K05013313
nvd.nist.gov/vuln/detail/CVE-2015-4047
github.com/advisories/GHSA-47jj-2hp6-grww
advisories.mageia.org/MGASA-2015-0243.html
bugs.mageia.org/show_bug.cgi?id=16042
suse.com/support/update/announcement/2015/suse-su-20151367-1
bugzilla.suse.com/931989
ubuntu.com/security/CVE-2015-4047
cve.org/CVERecord?id=CVE-2015-4047