Lucene search
HistoryJul 09, 2013 - 5:55 p.m.
CVE-2013-2054
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.074 Low
EPSS
Percentile
94.1%
Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2053 and CVE-2013-2054.
Affected configurations
Node
strongswanstrongswanMatch2.0.0
ORstrongswanstrongswanMatch2.0.1
ORstrongswanstrongswanMatch2.0.2
ORstrongswanstrongswanMatch2.1.0
ORstrongswanstrongswanMatch2.1.1
ORstrongswanstrongswanMatch2.1.2
ORstrongswanstrongswanMatch2.1.3
ORstrongswanstrongswanMatch2.1.4
ORstrongswanstrongswanMatch2.1.5
ORstrongswanstrongswanMatch2.3.0
ORstrongswanstrongswanMatch2.3.1
ORstrongswanstrongswanMatch2.3.2
ORstrongswanstrongswanMatch2.4
ORstrongswanstrongswanMatch2.4.0
ORstrongswanstrongswanMatch2.4.0a
ORstrongswanstrongswanMatch2.4.1
ORstrongswanstrongswanMatch2.4.2
ORstrongswanstrongswanMatch2.4.3
ORstrongswanstrongswanMatch2.4.4
ORstrongswanstrongswanMatch2.5.0
ORstrongswanstrongswanMatch2.5.1
ORstrongswanstrongswanMatch2.5.2
ORstrongswanstrongswanMatch2.5.3
ORstrongswanstrongswanMatch2.5.4
ORstrongswanstrongswanMatch2.5.5
ORstrongswanstrongswanMatch2.5.6
ORstrongswanstrongswanMatch2.5.7
ORstrongswanstrongswanMatch2.6
ORstrongswanstrongswanMatch2.6.0
ORstrongswanstrongswanMatch2.6.1
ORstrongswanstrongswanMatch2.6.2
ORstrongswanstrongswanMatch2.6.3
ORstrongswanstrongswanMatch2.6.4
ORstrongswanstrongswanMatch2.6.14
ORstrongswanstrongswanMatch2.6.16
ORstrongswanstrongswanMatch2.6.20
ORstrongswanstrongswanMatch2.6.21
ORstrongswanstrongswanMatch2.7.0
ORstrongswanstrongswanMatch2.7.1
ORstrongswanstrongswanMatch2.7.2
ORstrongswanstrongswanMatch2.7.3
ORstrongswanstrongswanMatch2.8.0
ORstrongswanstrongswanMatch2.8.1
ORstrongswanstrongswanMatch2.8.2
ORstrongswanstrongswanMatch2.8.3
ORstrongswanstrongswanMatch2.8.4
ORstrongswanstrongswanMatch2.8.5
ORstrongswanstrongswanMatch2.8.6
ORstrongswanstrongswanMatch2.8.7
ORstrongswanstrongswanMatch2.8.8
ORstrongswanstrongswanMatch2.8.9
ORstrongswanstrongswanMatch2.8.10
ORstrongswanstrongswanMatch2.8.11
ORstrongswanstrongswanMatch4.0.0
ORstrongswanstrongswanMatch4.0.1
ORstrongswanstrongswanMatch4.0.2
ORstrongswanstrongswanMatch4.0.3
ORstrongswanstrongswanMatch4.0.4
ORstrongswanstrongswanMatch4.0.5
ORstrongswanstrongswanMatch4.0.6
ORstrongswanstrongswanMatch4.0.7
ORstrongswanstrongswanMatch4.1
ORstrongswanstrongswanMatch4.1.0
ORstrongswanstrongswanMatch4.1.1
ORstrongswanstrongswanMatch4.1.2
ORstrongswanstrongswanMatch4.1.3
ORstrongswanstrongswanMatch4.1.4
ORstrongswanstrongswanMatch4.1.5
ORstrongswanstrongswanMatch4.1.6
ORstrongswanstrongswanMatch4.1.7
ORstrongswanstrongswanMatch4.1.8
ORstrongswanstrongswanMatch4.1.9
ORstrongswanstrongswanMatch4.1.10
ORstrongswanstrongswanMatch4.1.11
ORstrongswanstrongswanMatch4.2.0
ORstrongswanstrongswanMatch4.2.1
ORstrongswanstrongswanMatch4.2.2
ORstrongswanstrongswanMatch4.2.3
ORstrongswanstrongswanMatch4.2.4
ORstrongswanstrongswanMatch4.2.5
ORstrongswanstrongswanMatch4.2.6
ORstrongswanstrongswanMatch4.2.7
ORstrongswanstrongswanMatch4.2.8
ORstrongswanstrongswanMatch4.2.9
ORstrongswanstrongswanMatch4.2.10
ORstrongswanstrongswanMatch4.2.11
ORstrongswanstrongswanMatch4.2.12
ORstrongswanstrongswanMatch4.2.13
ORstrongswanstrongswanMatch4.2.14
ORstrongswanstrongswanMatch4.2.15
ORstrongswanstrongswanMatch4.2.16
ORstrongswanstrongswanMatch4.3.0
ORstrongswanstrongswanMatch4.3.1
ORstrongswanstrongswanMatch4.3.2
ORstrongswanstrongswanMatch4.3.3
ORstrongswanstrongswanMatch4.3.4
Related
cve
cve
ubuntucve
ubuntucve
CVE-2013-2054
2013-07-09 00:00:00
CVE-2013-2053
2013-07-09 00:00:00
debiancve
debiancve
CVE-2013-2054
2013-07-09 17:55:01
CVE-2013-2052
2022-10-03 16:15:00
prion
prion
Buffer overflow
2013-07-09 17:55:00
Buffer overflow
2013-07-09 17:55:00
Buffer overflow
2013-07-09 17:55:00
cvelist
cvelist
nvd
nvd
CVE-2013-2052
2013-07-09 17:55:00
CVE-2013-2053
2013-07-09 17:55:01
openvas
openvas
CentOS Update for openswan CESA-2013:0827 centos5
2013-05-17 00:00:00
Gentoo Security Advisory GLSA 201401-09
2015-09-29 00:00:00
RedHat Update for openswan RHSA-2013:0827-01
2013-05-17 00:00:00
oraclelinux
oraclelinux
openswan security update
2013-05-15 00:00:00
nessus
nessus
RHEL 5 / 6 : openswan (RHSA-2013:0827)
2013-05-16 00:00:00
Scientific Linux Security Update : openswan on SL5.x, SL6.x i386/x86_64 (20130515)
2013-05-16 00:00:00
GLSA-201401-09 : Openswan: User-assisted execution of arbitrary code
2014-01-20 00:00:00
centos
centos
openswan security update
2013-05-15 23:11:17
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:53:02
gentoo
gentoo
Openswan: User-assisted execution of arbitrary code
2014-01-18 00:00:00
strongSwan: Multiple vulnerabilities
2013-09-01 00:00:00
suse
suse
Security update for openswan (important)
2013-07-05 18:04:14
amazon
amazon
Important: openswan
2013-05-24 13:56:00
redhat
redhat
(RHSA-2013:0827) Important: openswan security update
2013-05-15 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2893-1] openswan security update
2014-04-07 00:00:00
Openswan / Strongswan security vulnerabilities
2014-05-07 00:00:00
debian
debian
[SECURITY] [DSA 2893-1] openswan security update
2014-03-31 20:00:54
osv
osv
openswan - security update
2014-03-31 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.074 Low
EPSS
Percentile
94.1%
Related for NVD:CVE-2013-2054