NVD

Id
38167  
Name
CVE-2013-2053  
Description
Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-07-09  
Modified Date
2014-04-19  
Seq
2013-2053  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195108 38167 CVE-2013-2053 SUSE-SU-2013:1150  View
195109 38167 CVE-2013-2053 RHSA-2013:0827  View
195110 38167 CVE-2013-2053 DSA-2893  View
195111 38167 CVE-2013-2053 59838  View
195112 38167 CVE-2013-2053 https://bugzilla.redhat.com/show_bug.cgi?id=960229  View
195113 38167 CVE-2013-2053 [Swan-announce] 20130514 CVE-2013-2052: Libreswan remote buffer overflow in atodn()  View
195114 38167 CVE-2013-2053 https://www.openswan.org/news/13  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21735 JVNDB-2013-003310 Openswan の atodn 関数におけるバッファオーバーフローの脆弱性 Openswan の atodn 関数には、日和見暗号化 (Opportunistic Encryption) が有効になっている、および RSA キーが使用される場合、バッファオーバーフローの脆弱性が存在します。 CVE-2013-2053 61995 CVE-2013-2053 38167 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003310.html 2013-05-31 2013-07-12 View