UBUNTU-CVE-2013-6075

The comparedn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows 1 remote attackers to cause a denial of service out-of-bounds read, NULL pointer dereference, and daemon crash or 2 remote authenticated users to impersonate arbitrary users and bypass access restrictions vi...

CVE-2013-6075

The CVE-2013-6075 issue affects strongSwan 4.3.3 through 5.1.1, where the compare_dn function in utils/identification.c may fail due to an insufficient length check during ID_DER_ASN1_DN identity comparison. This can cause a remote denial of service via an out-of-bounds read and NULL pointer dere...