CVE-2009-1574: racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (cras...

Security readout for executives and security teams

This is a remote crash issue in racoon, the IKE daemon from ipsec-tools. A malformed fragmented packet can crash the service, potentially interrupting VPN/IPsec connectivity. The supplied sources identify the fix as ipsec-tools 0.7.2 or vendor updates. Exposure is limited to systems running racoon from ipsec-tools before 0.7.2, especially network-reachable IPsec/IKE endpoints. Modern environments may only be exposed if legacy ipsec-tools packages remain deployed. Treat as medium priority unless the organization still depends on exposed legacy racoon/IPsec endpoints. In that case, prioritize patching because service crashes can disrupt remote access or site-to-site connectivity. Mitigation focus: Upgrade ipsec-tools to 0.7.2 or a vendor-patched package.; Apply relevant Ubuntu, Red Hat, Fedora, Gentoo, SUSE, or Apple security updates where applicable.; Confirm unsupported legacy ipsec-tools deployments are retired or isolated..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.