CVE-2013-4564 Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libreswan | = 3.6 | No fix listed |
References
- FEDORA-2013-23299 vendor-advisory
- FEDORA-2013-23315 vendor-advisory
- FEDORA-2013-23250 vendor-advisory
- 56276 third-party-advisory vendor-advisory
- libreswan.org vendor-advisory
- [Swan-announce] 20131211 Libreswan 3.7 released mailing-list patch vendor-advisory
- Debian Security Tracker CVE-2013-4564 vendor-advisory