MEDIUM
Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records
Published Jul 9, 2013
5.1
MEDIUMCVSS 2.0
EPSS 2.04%
Description
Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2053 and CVE-2013-2054.
Affected products
No data.
OR
- 2.0.0
- 2.0.1
- 2.0.2
- 2.1.0
- 2.1.1
- 2.1.2
- 2.1.3
- 2.1.4
- 2.1.5
- 2.3.0
- 2.3.1
- 2.3.2
- 2.4
- 2.4.0
- 2.4.0a
- 2.4.1
- 2.4.2
- 2.4.3
- 2.4.4
- 2.5.0
- 2.5.1
- 2.5.2
- 2.5.3
- 2.5.4
- 2.5.5
- 2.5.6
- 2.5.7
- 2.6
- 2.6.0
- 2.6.1
- 2.6.2
- 2.6.3
- 2.6.4
- 2.6.14
- 2.6.16
- 2.6.20
- 2.6.21
- 2.7.0
- 2.7.1
- 2.7.2
- 2.7.3
- 2.8.0
- 2.8.1
- 2.8.2
- 2.8.3
- 2.8.4
- 2.8.5
- 2.8.6
- 2.8.7
- 2.8.8
- 2.8.9
- 2.8.10
- 2.8.11
- 4.0.0
- 4.0.1
- 4.0.2
- 4.0.3
- 4.0.4
- 4.0.5
- 4.0.6
- 4.0.7
- 4.1
- 4.1.0
- 4.1.1
- 4.1.2
- 4.1.3
- 4.1.4
- 4.1.5
- 4.1.6
- 4.1.7
- 4.1.8
- 4.1.9
- 4.1.10
- 4.1.11
- 4.2.0
- 4.2.1
- 4.2.2
- 4.2.3
- 4.2.4
- 4.2.5
- 4.2.6
- 4.2.7
- 4.2.8
- 4.2.9
- 4.2.10
- 4.2.11
- 4.2.12
- 4.2.13
- 4.2.14
- 4.2.15
- 4.2.16
- 4.3.0
- 4.3.1
- 4.3.2
- 4.3.3
- 4.3.4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- http://download.strongswan.org/security/CVE-2013-2054/CVE-2013-2054.txt x_refsource_CONFIRMVendor Advisory
- http://www.securityfocus.com/bid/59837 vdb-entryx_refsource_BID
- https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html mailing-listx_refsource_MLIST
| Link | Providers | Tags |
|---|---|---|
| http://download.strongswan.org/security/CVE-2013-2054/CVE-2013-2054.txt | x_refsource_CONFIRMVendor Advisory | |
| http://www.securityfocus.com/bid/59837 | vdb-entryx_refsource_BID | |
| https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html | mailing-listx_refsource_MLIST |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 9, 2013
Updated Aug 6, 2024
Reserved Feb 19, 2013
Link CVE-2013-2054
CISA Vulnrichment
Updated n/a