Mandriva Linux Security Advisory 2009-112 – racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference. Updated packages are available that brings ipsec-tools to version 0.7.2 for Mandriva Linux 2008.1/2009.0/2009.1 which provides numerous bugfixes over the previous 0.7.1 version, and also corrects this issue. ipsec-tools for Mandriva Linux Corporate Server 4 has been patched to address this issue. Additionally the flex package required for building ipsec-tools has been fixed due to ipsec-tools build problems and is also available with this update.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/77498/MDVSA-2009-112.txt
Source: https://packetstormsecurity.com/files/77498/Mandriva-Linux-Security-Advisory-2009-112.html