Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-41913
HistoryDec 07, 2023 - 5:15 a.m.

Buffer overflow

2023-12-0705:15:00
PRIOn knowledge base
www.prio-n.com
8
strongswan
buffer overflow
remote code execution
dh proxy
ike_sa_init
nvd

9.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.

CPENameOperatorVersion
strongswange5.3.0
strongswanlt5.9.12