PT-2013-1253 · Gentoo Linux · Strongswan

Florian Weimer · Publicado 2013-07-09 · Atualizado 2023-02-13 · CVE-2013-2054

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions strongswan versions prior to 5.1.0

Description The issue affects the strongswan package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be carried out remotely.

Recommendations For versions prior to 5.1.0, update to version 5.1.0 or later to resolve the issue.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-09735

CVE-2013-2054

Produtos afetados

Strongswan

Referências · 10

• http://download.strongswan.org/security/CVE-2013-2054/CVE-2013-2054.txt · Aviso do Fabricante
• http://securityfocus.com/bid/59837 · Nota
• https://bdu.fstec.ru/vul/2015-09735 · Nota de Segurança
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2054 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2054 · Nota de Segurança
• https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html · Nota
• http://security.gentoo.org/glsa/glsa-201309-02.xml · Nota
• https://osv.dev/vulnerability/CVE-2013-2054 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-2054 · Aviso do Fabricante