CVE-2008-3651
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote...
CVE-2008-3651 is a medium vulnerability (CVSS 4.0) in Linux Ipsec Tools Racoon Daemon, published August 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. No source names a fixed version.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.32%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ipsec-toolsRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-toolsRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-toolsRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-toolsRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:0.2.5-0.7.rhel3.5 | 0:0.2.5-0.7.rhel3.5 |
ipsec-toolsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ipsec-toolsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
ipsec-toolsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
ipsec-toolsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:0.3.3-7.el4_7 | 0:0.3.3-7.el4_7 |
ipsec-toolsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:0.6.5-9.el5_2.3 | 0:0.6.5-9.el5_2.3 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:0.6.5-9.el5_2.3 | 0:0.6.5-9.el5_2.3 |
ipsec-toolsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:0.6.5-9.el5_2.3 | 0:0.6.5-9.el5_2.3 |
ipsec-tools-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:0.6.5-9.el5_2.3 | 0:0.6.5-9.el5_2.3 |
What each source reports
NVD Score used
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
- Record
CVE-2008-3651- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
- Record
CVE-2008-3651- Updated
- 2026-11-02
EUVDEUVD-2008-3637No score
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
- Record
EUVD-2008-3637- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qh6x-3hwj-23q7No score
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote...
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
- Record
GHSA-qh6x-3hwj-23q7- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
support.apple.com/kb/HT3639
vupen.com/english/advisories/2009/1621
mandriva.com/security/advisories?name=MDVSA-2008:181
sourceforge.net/mailarchive/message.php?msg_name=20080724084529.GA3768%40zen.inc
Show 33 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10453
secunia.com/advisories/35074
securityfocus.com/bid/30657
lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
marc.info?l=ipsec-tools-devel&m=121688914101709&w=2
security.gentoo.org/glsa/glsa-200812-03.xml
lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
securitytracker.com/id?1020667
bugzilla.redhat.com/show_bug.cgi?id=456660
us-cert.gov/cas/techalerts/TA09-133A.html
ubuntu.com/usn/usn-641-1
exchange.xforce.ibmcloud.com/vulnerabilities/44395
redhat.com/support/errata/RHSA-2008-0849.html
nvd.nist.gov/vuln/detail/CVE-2008-3651
access.redhat.com/errata/RHSA-2008:0849
github.com/advisories/GHSA-qh6x-3hwj-23q7
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0849.json
cve.org/CVERecord?id=CVE-2008-3651