CVE-2013-6075

Published Nov 2, 2013

Last updated 11 years ago

Overview

Description: The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an "insufficient length check" during identity comparison.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-119

Evaluator

Comment: Per http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6075%29.html 'Affected are strongSwan versions 4.3.3 and newer, up to 5.1.0.'
Impact: -
Solution: -

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83086A98-0F54-460E-929F-A32DCCC604A7"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.3.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8421916C-B6D2-4771-8E59-7057ACC096E6"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.3.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A76F8B29-E036-4895-8296-29FE49C34A34"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.3.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "345E6CA4-A6E3-4A8B-9542-04D032956FCB"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.3.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CA544693-EE26-47A9-9EA2-5CA2AE17E387"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "693623FC-189E-478E-8426-292A9002AABA"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "278AB378-33D0-449D-8578-B537B4D28C5B"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D7B465A7-9C74-411B-B65A-892BED6FBD39"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3D84EEB7-9900-4765-A1AD-B005618ACEDF"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "89057C10-2C55-45CB-8497-40E27EAED297"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6D8A9FCA-801F-4320-A3EA-F3EA952F47A6"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7350416E-359D-45F4-A3AC-1CF7E6EC7ED3"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "23A022A5-6DDA-4B4C-8354-935F9D99BC74"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73AED6DF-50C7-49DE-A9CA-A5AB519B4832"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3BDCDDFD-E4ED-436F-A8AD-B218CC5790D3"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1650266B-7975-4ADB-8E7F-A2854ED27CCC"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "944942A8-79D0-40AC-BE98-D552DCF2BB07"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "905ABDB8-6CC3-4F7F-8853-8EDDA5E5AB8F"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "14E2A13E-427F-45A7-B898-64C10CD8962B"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "40ED1E2A-B769-4B1D-83D1-300789E03C97"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:5.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "339D620A-CD60-4078-81A1-5703B1CFBB3D"
          },
          {
            "criteria": "cpe:2.3:a:strongswan:strongswan:5.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0973151D-E7F0-4F3D-B2AD-62486C27DFEE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Evaluator

Configurations

References