CVE-2013-6075
CVE-2013-6075
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an "insufficient length check" during identity comparison.
EPSS 2.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
strongswan Debian:12
- Affected ranges
- ECOSYSTEM: < 5.1.0-3
Update to 5.1.0-3
strongswan Debian:13
- Affected ranges
- ECOSYSTEM: < 5.1.0-3
Update to 5.1.0-3
strongswan Debian:14
- Affected ranges
- ECOSYSTEM: < 5.1.0-3
Update to 5.1.0-3