CVE-2013-6467

Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
libreswanlibreswan
𝑥
≤ 3.7
libreswanlibreswan
3.0
libreswanlibreswan
3.1
libreswanlibreswan
3.2
libreswanlibreswan
3.3
libreswanlibreswan
3.4
libreswanlibreswan
3.5
libreswanlibreswan
3.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libreswan
bullseye
4.3-1+deb11u4
fixed
bullseye (security)
4.3-1+deb11u3
fixed
bookworm
4.10-2+deb12u1
fixed
sid
4.14-1.1
fixed
trixie
4.14-1.1
fixed
References
http://osvdb.org/102172
http://secunia.com/advisories/56420
http://www.securityfocus.com/bid/64987
https://exchange.xforce.ibmcloud.com/vulnerabilities/90522
https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt
http://osvdb.org/102172
http://secunia.com/advisories/56420
http://www.securityfocus.com/bid/64987
https://exchange.xforce.ibmcloud.com/vulnerabilities/90522
https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt