CVE-2023-41913

CVE-2023-41913 affects strongSwan prior to 5.9.12, due to a buffer overflow in the DH proxy (charon-tkm) that can trigger unauthenticated remote code execution via a crafted IKE_SA_INIT message. Earliest affected version is 5.3.0. Reported impact is total compromise of confidentiality, integrity,...

CVE-2023-41913

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message...

CVE-2023-41913

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message...