CVE-2013-6075
N/A
Published: November 2, 2013 at 06:00 PM UTC
Updated: June 16, 2026 at 11:59 PM UTC
1 product affected across 1 vendorstrongSwan
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an "insufficient length check" during identity comparison.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (3)
x_refsource_MISCPatch
Source: [email protected]
http://download.strongswan.org/security/CVE-2013-6075/strongswan-4.3.3-5.1.0_id_dn_match.patchVendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2012/dsa-2789x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6075%29.htmlQuick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card