CVE-2013-2053

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2013-07/msg00008.html
• rhn.redhat.com/errata/RHSA-2013-0827.html
• debian.org/security/2014/dsa-2893
• securityfocus.com/bid/59838
• bugzilla.redhat.com/show_bug.cgi
• lists.libreswan.org/pipermail/swan-announce/2013/000003.html
• openswan.org/news/13 · Vendor Advisory

openswan のその他の脆弱性

• CVE-2018-15836高 7.5In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padd…
• CVE-2014-2037中 5.0Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets tha…
• CVE-2013-6466中 5.0Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2…
• CVE-2011-4073中 4.0Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated …
• CVE-2011-3380中 5.0Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) vi…