CVE-2013-2054 in strongSwan
Summary
Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2053 and CVE-2013-2054.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/19/2013
Disclosure
07/09/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 64452 | strongSwan Encryption atodn memory corruption | 119 | Not defined | Official fix | CVE-2013-2054 |