CVE-2013-5018

🗓️ 28 Aug 2013 23:55:10Reported by [email protected]Type

The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow

Reporter	Title	Published	Views	Family All 39
ALT Linux	Security fix for the ALT Linux 7 package strongswan version 5.1.0-alt1	7 Aug 201300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Strongswan affect Power Hardware Management Console (CVE-2014-9221,CVE-2014-2891,CVE-2014-2338,CVE-2013-5018)	23 Sep 202101:31	–	ibm
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CVE-2013-5018	28 Aug 201317:18	–	cve
Cvelist	CVE-2013-5018	28 Aug 201317:18	–	cvelist
Debian CVE	CVE-2013-5018	28 Aug 201317:18	–	debiancve
FreeBSD	strongswan -- multiple DoS vulnerabilities	1 Nov 201300:00	–	freebsd
EUVD	EUVD-2013-4860	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 18 Update: strongswan-5.1.0-2.fc18	21 Aug 201300:09	–	fedora
Fedora	[SECURITY] Fedora 19 Update: strongswan-5.1.0-1.fc19	21 Aug 201300:01	–	fedora

NVD

Node

strongswan strongswanMatch4.1.11

Node

strongswan strongswanMatch5.0.0

strongswan strongswanMatch5.0.1

strongswan strongswanMatch5.0.2

strongswan strongswanMatch5.0.3

strongswan strongswanMatch5.0.4

Node

opensuse opensuseMatch11.4

opensuse opensuseMatch12.2

opensuse opensuseMatch12.3

Source	Link
lists	www.lists.opensuse.org/opensuse-updates/2013-08/msg00050.html
lists	www.lists.opensuse.org/opensuse-updates/2013-08/msg00022.html
secunia	www.secunia.com/advisories/54524
strongswan	www.strongswan.org/blog/2013/08/01/strongswan-denial-of-service-vulnerability-%28cve-2013-5018%29.html
secunia	www.secunia.com/advisories/54315
lists	www.lists.strongswan.org/pipermail/users/2013-July/009540.html
securityfocus	www.securityfocus.com/bid/61564
lists	www.lists.opensuse.org/opensuse-updates/2013-08/msg00021.html
strongswan	www.strongswan.org/blog/2013/08/01/strongswan-5.1.0-released.html

29 Apr 2026 01:13Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

EPSS0.02902

CWE-119