PRIOn knowledge basePRION:CVE-2013-6075Null pointer dereference
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
58.7%
The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an “insufficient length check” during identity comparison.
| CPE | Name | Operator | Version |
|---|---|---|---|
| strongswan | eq | 4.3.7 | |
| strongswan | eq | 4.5.3 | |
| strongswan | eq | 4.5.2 | |
| strongswan | eq | 5.0.1 | |
| strongswan | eq | 4.4.0 | |
| strongswan | eq | 5.1.0 | |
| strongswan | eq | 4.5.1 | |
| strongswan | eq | 4.3.5 | |
| strongswan | eq | 4.6.4 | |
| strongswan | eq | 4.3.3 |
Related
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
58.7%