CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed packet.Referenceshttp://www.debian.org/security/2002/dsa-104https://exchange.xforce.ibmcloud.com/vulnerabilities/7883http://www.redhat.com/support/errata/RHSA-2002-007.html