CVE:CVE-2015-4047
CNNVD:CNNVD-201505-542
IPsec-Tools是一个用户空间（User-space）上的不同IPSec的实现，它移植自KAME的libipsec、setkey和racoon，并且支持各种BSD系统。
IPsec-Tools 0.8.2版本的racoon/gssapi.c文件中存在安全漏洞。远程攻击者可通过发送一系列的UDP请求利用该漏洞造成拒绝服务（空指针逆向引用和IKE守护进程崩溃）。
solution:Upgrade ipsec-tools ipsec-tools to a higher version than 0.8.2,and avoid the version 0.8.2; Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.4.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.0.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.3.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_analytics to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.0.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_access_policy_manager to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.0.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_application_security_manager to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.0.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_domain_name_system to a higher version than 12.1.4,13.0.0,and avoid the version [12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_edge_gateway to a higher version than 11.3.0,and avoid the version [11.0.0,11.3.0]; Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.6.4,and avoid the version [11.0.0,11.6.4]; Upgrade f5 big-ip_link_controller to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.0.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 11.6.4,12.1.4,13.0.0,and avoid the version [11.3.0,11.6.4],[12.0.0,12.1.4],13.0.0; Upgrade f5 big-ip_protocol_security_manager to a higher version than 11.4.1,and avoid the version [11.0.0,11.4.1]; Upgrade f5 big-ip_wan_optimization_manager to a higher version than 11.3.0,and avoid the version [11.0.0,11.3.0]; Upgrade f5 big-ip_webaccelerator to a higher version than 11.3.0,and avoid the version [11.0.0,11.3.0]; Upgrade f5 big-iq_adc to a higher version than 4.5.0,and avoid the version 4.5.0; Upgrade f5 big-iq_centralized_management to a higher version than 4.6.0,and avoid the version 4.6.0; Upgrade f5 big-iq_cloud to a higher version than 4.5.0,and avoid the version [4.0.0,4.5.0]; Upgrade f5 big-iq_cloud_and_orchestration to a higher version than 1.0.0,and avoid the version 1.0.0; Upgrade f5 big-iq_device to a higher version than 4.5.0,and avoid the version [4.2.0,4.5.0]; Upgrade f5 big-iq_security to a higher version than 4.5.0,and avoid the version [4.0.0,4.5.0]; Upgrade f5 enterprise_manager to a higher version than 3.1.1,and avoid the version [3.0.0,3.1.1]; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0