CVE-2013-4564

Libreswan 3.6 allows remote attackers to cause a denial of service crash via a small length value and 1 no version or 2 an invalid major number in an IKE packet...

CVE-2013-4564

CVE-2013-4564 affects Libreswan (IPsec/IKE) up to version 3.6. The issue is in IKEv2 processing (ikev2parent_inI1outR1) that can crash a remote peer when handling a small KE payload with either no version or an invalid major number, leading to denial of service. Public sources in connected docs c...

CVE-2013-4564: Undefined Security Weakness

Libreswan 3.6 allows remote attackers to cause a denial of service crash via a small length value and 1 no version or 2 an invalid major number in an IKE packet...

libreswan多个漏洞

CVE ID：CVE-2013-4564 Libreswan是一款类似OpenSwan的IPsec实现。 1处理"processpacket方法pluto/demux.c中IKE数据包时的错误，导致通过特制的IKE数据包造成libreswan重新启动。 2处理"ikev2parentinI1outR1"函数（pluto/ikev2parent.c中IKE通告报文时的错误，导致利用特制的IKE引起libreswan重新启动。 3为RHEL处理libreswan.spec文件时应用程序不安全创建/var/tmp/libreswan-nss-pwd文件，可被利用来操纵某些数据。 0...

[SECURITY] Fedora 20 Update: libreswan-3.7-1.fc20

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 19 Update: libreswan-3.7-1.fc19

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Fedora Update for libreswan FEDORA-2013-23315

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libreswan FEDORA-2013-23299

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : libreswan-3.7-1.fc20 (2013-23250)

Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for libreswan FEDORA-2013-23299

Check for the Version of libreswan OpenVAS Vulnerability Test Fedora Update for libreswan FEDORA-2013-23299 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora 18 : libreswan-3.7-1.fc18 (2013-23299)

Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM Improved Cisco interop, IKEv2 improvements, bugfixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 19 : libreswan-3.7-1.fc19 (2013-23315)

Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM support Improved Cisco interop, IKEv2 improvements, bugfixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora Update for libreswan FEDORA-2013-23315

Check for the Version of libreswan OpenVAS Vulnerability Test Fedora Update for libreswan FEDORA-2013-23315 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Buffer overflow

Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be t...

CVE-2013-2052

Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be t...

CVE-2013-2052

Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be t...

CVE-2013-2052

CVE-2013-2052 describes a remote, non-authenticated buffer overflow in the atodn() function of Libreswan/OpenSwan when Opportunistic Encryption is enabled and an attacker controls a DNS TXT PTR record. This can crash the pluto IKE daemon and potentially allow code execution. The vulnerability is ...

CVE-2013-2052

Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be t...

CVE-2013-2052: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be t...