CVE-2013-2053
Fixed in a distro release EPSS 2%
Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.
Products: xelerance openswan
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | openswan | 1:2.6.28+dfsg-5+squeeze2 |
| Debian 7 | openswan | 1:2.6.37-3+deb7u1 |
| Red Hat Enterprise Linux 5 | openswan | 0:2.6.32-5.el5_9 |
| Red Hat Enterprise Linux 5 | openswan-debuginfo | 0:2.6.32-5.el5_9 |
| Red Hat Enterprise Linux 5 | openswan-doc | 0:2.6.32-5.el5_9 |
| Red Hat Enterprise Linux 6 | openswan | 0:2.6.32-20.el6_4 |
| Red Hat Enterprise Linux 6 | openswan-debuginfo | 0:2.6.32-20.el6_4 |
| Red Hat Enterprise Linux 6 | openswan-doc | 0:2.6.32-20.el6_4 |