Back to search
CVE-2013-2053
Published: Jul 9, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://www.openswan.org/news/13
x_refsource_CONFIRM
SUSE-SU-2013:1150
vendor-advisory
x_refsource_SUSE
RHSA-2013:0827
vendor-advisory
x_refsource_REDHAT
59838
vdb-entry
x_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=960229
x_refsource_CONFIRM
[Swan-announce] 20130514 CVE-2013-2052: Libreswan remote buffer overflow in atodn()
mailing-list
x_refsource_MLIST
DSA-2893
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now