CVE-2008-3652

CVE-2008-3652 describes a denial-of-service vulnerability in the racoon component of ipsec-tools. Specifically, the src/racoon/handler.c file fails to properly remove orphaned phase 1 handles initiated remotely, leading to resource exhaustion. This vulnerability carries a high severity CVSS score of 7.8, indicating it can be exploited remotely with low complexity and without authentication, resulting in a complete denial of service. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.