THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2023-41913

Reserved:2023-09-05
Published:2023-12-07
Updated:2024-06-11

Description

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.

References

https://github.com/strongswan/strongswan/releases

https://www.strongswan.org/blog/2023/11/20/strongswan-vulnerability-%28cve-2023-41913%29.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO/ (FEDORA-2024-6712c699fc) vendor-advisory

cve.org CVE-2023-41913

nvd.nist.gov CVE-2023-41913

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-41913