Libreswan CVE-2013-4564

MEDIUM

Numeric Errors (CWE-189)

2014-01-07 secalert@redhat.com

Denial Of Service Libreswan

5.0

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

P

Lifecycle Timeline

1

CVE Published

Jan 07, 2014 - 17:04 cve.org

MEDIUM 5.0

DescriptionCVE.org

Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.

AnalysisAI

Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-189. Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet. Affected products include: Libreswan.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Libreswan

View all

CVE-2013-7283 CRITICAL Act Now POC

Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has

CVE-2019-12312 HIGH This Week POC

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. Rated high severity (CVSS 7.5), this vuln

CVE-2023-23009 MEDIUM This Month POC

Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS pa

CVE-2013-7294 MEDIUM This Month POC

The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a de

CVE-2016-3071 HIGH This Week

Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transfor

CVE-2016-5361 HIGH This Week

programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers t

CVE-2016-5391 HIGH This Week

libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon re

CVE-2026-12413 HIGH This Week

Denial of service in the Libreswan IPsec VPN's pluto daemon allows remote unauthenticated attackers to crash and repeate

CVE-2023-30570 HIGH This Week

pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticat

CVE-2023-2295 HIGH This Week

A vulnerability was found in the libreswan library. Rated high severity (CVSS 7.5), this vulnerability is remotely explo

CVE-2020-1763 HIGH This Week

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unau

CVE-2023-38712 MEDIUM This Month

An issue was discovered in Libreswan 3.x and 4.x before 4.12. Rated medium severity (CVSS 6.5), this vulnerability is re

Same weakness CWE-189 – Numeric Errors

View all

CVE-2013-2094 HIGH POC

CVE-2015-3864 CRITICAL POC

CVE-2012-1182 CRITICAL POC

CVE-2015-1538 CRITICAL POC

CVE-2016-3645 CRITICAL POC

CVE-2015-3087 CRITICAL POC

CVE-2015-2470 CRITICAL POC

CVE-2013-4124 MEDIUM POC

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Share

CVE-2013-4564 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy