← Vulnerability feed

Vulnerability record · CVE-2004-0392 · published 14 June 2004

CVE-2004-0392: Kame racoon vulnerability

Kame · Racoon

racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

5.0 CVSS 2.0 Medium EPSS 2.5% · top 16.0%
5.0CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt
http://orange.kame.net/dev/query-pr.cgi?pr=555
http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15893
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt
http://orange.kame.net/dev/query-pr.cgi?pr=555
http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15893

Track CVE-2004-0392 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0607Ipsec-tools vulnerabilityThe eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attack…EPSS 5.4%7.5CVE-2004-0155Kame racoon vulnerabilityThe KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authenti…EPSS 3.6%5.0CVE-2005-0398Ipsec-tools vulnerabilityThe KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.EPSS 2.4%5.0CVE-2004-0403Kame racoon vulnerabilityRacoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.EPSS 2.9%5.0CVE-2004-0164Kame racoon vulnerabilityKAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message …EPSS 6.7%

Source: NIST National Vulnerability Database (record CVE-2004-0392), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.