CVE-2013-5018

The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
strongswanstrongswan
4.1.11
strongswanstrongswan
5.0.0
strongswanstrongswan
5.0.1
strongswanstrongswan
5.0.2
strongswanstrongswan
5.0.3
strongswanstrongswan
5.0.4
opensuseopensuse
11.4
opensuseopensuse
12.2
opensuseopensuse
12.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
strongswan
bullseye (security)
5.9.1-1+deb11u4
fixed
bullseye
5.9.1-1+deb11u4
fixed
bookworm
5.9.8-5+deb12u1
fixed
bookworm (security)
5.9.8-5+deb12u1
fixed
sid
5.9.13-2
fixed
trixie
5.9.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
strongswan
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
not-affected
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
lucid
ignored
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-updates/2013-08/msg00021.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00022.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00050.html
http://secunia.com/advisories/54315
http://secunia.com/advisories/54524
http://strongswan.org/blog/2013/08/01/strongswan-5.1.0-released.html
http://strongswan.org/blog/2013/08/01/strongswan-denial-of-service-vulnerability-%28cve-2013-5018%29.html
http://www.securityfocus.com/bid/61564
https://lists.strongswan.org/pipermail/users/2013-July/009540.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00021.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00022.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00050.html
http://secunia.com/advisories/54315
http://secunia.com/advisories/54524
http://strongswan.org/blog/2013/08/01/strongswan-5.1.0-released.html
http://strongswan.org/blog/2013/08/01/strongswan-denial-of-service-vulnerability-%28cve-2013-5018%29.html
http://www.securityfocus.com/bid/61564
https://lists.strongswan.org/pipermail/users/2013-July/009540.html