Lucene search
K

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.

🗓️ 08 Dec 2023 08:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 2 Views

StrongSwan before 5.9.12 has a DH proxy buffer overflow enabling remote code execution.

Related
Detection
ReporterTitlePublishedViews
Family
FreeBSD
strongSwan -- vulnerability in charon-tkm
20 Nov 202300:00
freebsd
AlpineLinux
CVE-2023-41913
7 Dec 202300:00
alpinelinux
AstraLinux
Astra Linux - уязвимость в strongswan
20 May 202605:53
astralinux
CBLMariner
CVE-2023-41913 affecting package strongswan for versions less than 5.9.10-3
18 Dec 202317:39
cbl_mariner
CBLMariner
CVE-2023-41913 affecting package strongswan for versions less than 5.9.12-1
17 May 202421:38
cbl_mariner
Circl
CVE-2023-41913
30 Dec 202311:06
circl
CNNVD
strongSwan Security Vulnerabilities
21 Nov 202300:00
cnnvd
CVE
CVE-2023-41913
7 Dec 202300:00
cve
Cvelist
CVE-2023-41913
7 Dec 202300:00
cvelist
Debian
[SECURITY] [DLA 3663-1] strongswan security update
24 Nov 202315:45
debian
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Feb 2026 10:06Current
9.4High risk
Vulners AI Score9.4
CVSS 3.19.8
EPSS0.05456
SSVC
2