CVE Vulnerabilities

CVE-2013-6076

Published: Nov 02, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
4.3 MODERATE
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io minimus.io echohq.com

strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.

Affected Software

Name Vendor Start Version End Version
Strongswan Strongswan 5.0.2 (including) 5.0.2 (including)
Strongswan Strongswan 5.0.3 (including) 5.0.3 (including)
Strongswan Strongswan 5.0.4 (including) 5.0.4 (including)
Strongswan Strongswan 5.1.0 (including) 5.1.0 (including)
Strongswan Ubuntu lucid *
Strongswan Ubuntu upstream *

References