CVE-2013-6075

The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds…

published November 2, 2013

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an "insufficient length check" during identity comparison.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02448 · 84.2th percentile
Published
2013-11-02T18:00Z
EPSS history
Timeline
  • 02 NOV 18:00Z
    The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds…
    cvelistv5