Vulnerability in Strongswan

CVE-2013-6076

strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.

EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.

Affected products

  • Strongswan — versions 5.0.2, 5.0.3, 5.0.4
  • N/a — versions n/a

References