CVE-2013-4564

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2013-December/124911.html
• lists.fedoraproject.org/pipermail/package-announce/2013-December/124928.html
• lists.fedoraproject.org/pipermail/package-announce/2013-December/124943.html
• secunia.com/advisories/56276 · Vendor Advisory
• libreswan.org/security/CVE-2013-4564/CVE-2013-4564.txt.asc · Vendor Advisory
• lists.libreswan.org/pipermail/swan-announce/2013/000007.html · Patch

libreswan のその他の脆弱性

• CVE-2026-50722中 5.9Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest w…
• CVE-2026-50721中 5.9Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when t…
• CVE-2026-12413高 7.5An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of…
• CVE-2024-3652中 6.5The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer …
• CVE-2023-38712中 6.5An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify…