Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-5018
HistoryAug 28, 2013 - 11:55 p.m.

CVE-2013-5018

2013-08-2823:55:10
CWE-119
[email protected]
web.nvd.nist.gov
7

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.042

Percentile

92.3%

JSON

The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow.

Affected configurations

Nvd
Node
strongswanstrongswanMatch4.1.11
Node
strongswanstrongswanMatch5.0.0
OR
strongswanstrongswanMatch5.0.1
OR
strongswanstrongswanMatch5.0.2
OR
strongswanstrongswanMatch5.0.3
OR
strongswanstrongswanMatch5.0.4
Node
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.2
OR
opensuseopensuseMatch12.3
VendorProductVersionCPE
strongswanstrongswan4.1.11cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*
strongswanstrongswan5.0.0cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*
strongswanstrongswan5.0.1cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*
strongswanstrongswan5.0.2cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*
strongswanstrongswan5.0.3cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*
strongswanstrongswan5.0.4cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*
opensuseopensuse11.4cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
opensuseopensuse12.2cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
opensuseopensuse12.3cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

Related

nessus 7
cve 1
ubuntucve 1
debiancve 1
altlinux 1
cvelist 1
prion 1
openvas 12
fedora 4
gentoo 1
freebsd 1
ibm 1
osv 1
nessus
nessus
Fedora 19 : strongswan-5.1.0-1.fc19 (2013-14481)
2013-08-21 00:00:00
openSUSE Security Update : strongswan (openSUSE-SU-2013:1332-1)
2014-06-13 00:00:00
Fedora 18 : strongswan-5.1.0-2.fc18 (2013-14510)
2013-08-21 00:00:00
cve
cve
CVE-2013-5018
2013-08-28 23:55:10
ubuntucve
ubuntucve
CVE-2013-5018
2013-08-28 00:00:00
debiancve
debiancve
CVE-2013-5018
2013-08-28 23:55:10
altlinux
altlinux
Security fix for the ALT Linux 7 package strongswan version 5.1.0-alt1
2013-08-07 00:00:00
cvelist
cvelist
CVE-2013-5018
2013-08-28 17:18:00
prion
prion
Integer overflow
2013-08-28 23:55:00
openvas
openvas
Fedora Update for strongswan FEDORA-2013-14481
2013-08-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:1866-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:1866-2)
2021-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: strongswan-5.1.0-1.fc19
2013-08-21 00:01:39
[SECURITY] Fedora 18 Update: strongswan-5.1.0-2.fc18
2013-08-21 00:09:34
[SECURITY] Fedora 19 Update: strongswan-5.1.1-4.fc19
2014-01-25 02:26:05
gentoo
gentoo
strongSwan: Multiple vulnerabilities
2013-09-01 00:00:00
freebsd
freebsd
strongswan -- multiple DoS vulnerabilities
2013-11-01 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Strongswan affect Power Hardware Management Console (CVE-2014-9221,CVE-2014-2891,CVE-2014-2338,CVE-2013-5018)
2021-09-23 01:31:39
osv
osv
strongswan-5.3.5-1.1 on GA media
2024-06-15 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.042

Percentile

92.3%

JSON
Related for NVD:CVE-2013-5018
nessus7cve1ubuntucve1debiancve1altlinux1cvelist1prion1openvas12fedora4gentoo1freebsd1ibm1osv1