Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-2053

Опубликовано: 09 июл. 2013
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xelerance:openswan:*:*:*:*:*:*:*:*
Версия до 2.6.38 (включая)
cpe:2.3:a:xelerance:openswan:2.6.01:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.02:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.03:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.04:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.05:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.06:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.07:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.08:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.09:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.10:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.11:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.12:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.13:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.14:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.15:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.16:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.17:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.18:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.19:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.20:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.21:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.22:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.23:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.24:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.25:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.26:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.27:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.28:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.29:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.30:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.31:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.32:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.33:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.34:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.35:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.36:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.37:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.02427
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 13 лет назад

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.

redhat
около 13 лет назад

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.

debian
около 13 лет назад

Buffer overflow in the atodn function in Openswan before 2.6.39, when ...

github
около 4 лет назад

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.

oracle-oval
около 13 лет назад

ELSA-2013-0827: openswan security update (IMPORTANT)

EPSS

Процентиль: 83%
0.02427
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119