CVE-2008-3652: src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it ha...

Security readout for executives and security teams

This CVE describes a remote denial-of-service issue in racoon, the IKE daemon from ipsec-tools. A remote party could cause orphaned phase 1 handles to remain allocated, consuming resources over time. The provided sources do not show data theft, code execution, or confirmed active exploitation. Exposure is most likely on systems running racoon from ipsec-tools for IPsec/IKE services, especially reachable VPN gateways. The bundle names multiple vendor advisories, but does not provide authoritative affected version ranges. Treat this as a service-availability risk for VPN or IPsec infrastructure. It should be scheduled promptly for exposed gateways, but the source bundle does not support emergency treatment absent critical business dependency or active symptoms. Mitigation focus: Inventory systems running racoon or ipsec-tools.; Review the listed vendor advisories for fixed packages or platform-specific guidance.; Prioritize updates on internet-facing IPsec/IKE gateways..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.