CVEvulnerability

CVE-2013-6467

5.0 MEDIUM Published 2014-01-26 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-01-26
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.

Affected configurations

• libreswan libreswan (<= 3.7) • libreswan libreswan 3.0 • libreswan libreswan 3.1 • libreswan libreswan 3.2 • libreswan libreswan 3.3 • libreswan libreswan 3.4 • libreswan libreswan 3.5 • libreswan libreswan 3.6

References

http://osvdb.org/102172 osvdb.org
http://secunia.com/advisories/56420 Vendor Advisory
http://www.securityfocus.com/bid/64987 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/90522 exchange.xforce.ibmcloud.com
https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt Vendor Advisory
http://osvdb.org/102172 osvdb.org
http://secunia.com/advisories/56420 Vendor Advisory
http://www.securityfocus.com/bid/64987 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/90522 exchange.xforce.ibmcloud.com
https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt Vendor Advisory