CVE Vulnerabilities

CVE-2013-6076

Published: Nov 02, 2013 | Modified: Nov 21, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
4.3 MODERATE
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.

Affected Software

Name Vendor Start Version End Version
Strongswan Strongswan 5.0.2 (including) 5.0.2 (including)
Strongswan Strongswan 5.0.3 (including) 5.0.3 (including)
Strongswan Strongswan 5.0.4 (including) 5.0.4 (including)
Strongswan Strongswan 5.1.0 (including) 5.1.0 (including)
Strongswan Ubuntu lucid *
Strongswan Ubuntu upstream *

References