This host is installed with IPSec-Tools for Linux and is prone to Memory Leakage Vulnerability.

Successful exploitation will let the attacker cause multiple memory leaks or memory consumption through signature verification during user authentication with X.509 certificates. Impact level: System/Application

Upgrade to the latest version 0.7.2 http://ipsec-tools.sourceforge.net

Multiple memory leaks are cause due to error in eay_check_x509sign function in 'src/racoon/crypto_openssl.c' and NAT Traversal keepalive implementation in 'src/racoon/nattraversal.c' files.

IPsec Tools version prior to 0.7.2

• http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611
• http://www.openwall.com/lists/oss-security/2009/05/12/3

---

Updated on 2017-03-28