CVE-2013-6467

2014-01-2620:55:05

redhat

web.nvd.nist.gov

cve-2013-6467

libreswan

remote attack

denial of service

null pointer dereference

ikev2

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.015

Percentile

86.8%

JSON

Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.

Affected configurations

Nvd

Node

libreswanlibreswanRange≤3.7

libreswanlibreswanMatch3.0

libreswanlibreswanMatch3.1

libreswanlibreswanMatch3.2

libreswanlibreswanMatch3.3

libreswanlibreswanMatch3.4

libreswanlibreswanMatch3.5

libreswanlibreswanMatch3.6

VendorProductVersionCPE
libreswanlibreswan*cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*
libreswanlibreswan3.0cpe:2.3:a:libreswan:libreswan:3.0:*:*:*:*:*:*:*
libreswanlibreswan3.1cpe:2.3:a:libreswan:libreswan:3.1:*:*:*:*:*:*:*
libreswanlibreswan3.2cpe:2.3:a:libreswan:libreswan:3.2:*:*:*:*:*:*:*
libreswanlibreswan3.3cpe:2.3:a:libreswan:libreswan:3.3:*:*:*:*:*:*:*
libreswanlibreswan3.4cpe:2.3:a:libreswan:libreswan:3.4:*:*:*:*:*:*:*
libreswanlibreswan3.5cpe:2.3:a:libreswan:libreswan:3.5:*:*:*:*:*:*:*
libreswanlibreswan3.6cpe:2.3:a:libreswan:libreswan:3.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libreswan	libreswan	*	cpe:2.3:a:libreswan:libreswan::::::::
libreswan	libreswan	3.0	cpe:2.3:a:libreswan:libreswan:3.0:::::::*
libreswan	libreswan	3.1	cpe:2.3:a:libreswan:libreswan:3.1:::::::*
libreswan	libreswan	3.2	cpe:2.3:a:libreswan:libreswan:3.2:::::::*
libreswan	libreswan	3.3	cpe:2.3:a:libreswan:libreswan:3.3:::::::*
libreswan	libreswan	3.4	cpe:2.3:a:libreswan:libreswan:3.4:::::::*
libreswan	libreswan	3.5	cpe:2.3:a:libreswan:libreswan:3.5:::::::*
libreswan	libreswan	3.6	cpe:2.3:a:libreswan:libreswan:3.6:::::::*