CVEvulnerability

CVE-2013-6076

5.0 MEDIUM Published 2013-11-02 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2013-11-02
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.

Affected configurations

• strongswan strongswan 5.0.2 • strongswan strongswan 5.0.3 • strongswan strongswan 5.0.4 • strongswan strongswan 5.1.0

References

http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6076%29.html Patch, Vendor Advisory
http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6076%29.html Patch, Vendor Advisory