PT-2013-1253 · Gentoo Linux · Strongswan

Florian Weimer · Published 2013-07-09 · Updated 2023-02-13 · CVE-2013-2054

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions strongswan versions prior to 5.1.0

Description The issue affects the strongswan package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be carried out remotely.

Recommendations For versions prior to 5.1.0, update to version 5.1.0 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-09735

CVE-2013-2054

Affected Products

Strongswan

References · 10

• http://download.strongswan.org/security/CVE-2013-2054/CVE-2013-2054.txt · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09735 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2054 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2054 · Security Note
• https://osv.dev/vulnerability/CVE-2013-2054 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-2054 · Vendor Advisory
• http://securityfocus.com/bid/59837 · Note
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6 · Note
• https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html · Note
• http://security.gentoo.org/glsa/glsa-201309-02.xml · Note