The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.
Affected Platforms
Redhat Enterprise Linux DesktopRedhat Enterprise Linux