{"id":"CVE-2013-2053","aliases":["DSA-2893-1","EUVD-2013-2035","GHSA-xqwx-33f7-54m6","RHSA-2013:0827"],"status":"published","title":"Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is...","description":"Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records.  NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02447,"percentile":0.8446,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-07-09T17:00:00Z","modified":"2026-06-26T10:21:42Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"openswan","fixed_in":["0:2.6.32-5.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"openswan-debuginfo","fixed_in":["0:2.6.32-5.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"openswan-doc","fixed_in":["0:2.6.32-5.el5_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openswan","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openswan-debuginfo","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openswan-doc","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openswan","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openswan-debuginfo","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openswan-doc","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openswan","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openswan-debuginfo","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openswan-doc","fixed_in":["0:2.6.32-20.el6_4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"openswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6.28+dfsg-5+squeeze2"}]}],"versions":["1:2.6.28+dfsg-5","1:2.6.28+dfsg-5+squeeze1","1:2.6.28+dfsg-5+squeeze1~bpo50+1"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"openswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6.37-3+deb7u1"}]}],"versions":["1:2.6.37-3"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-5.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-5.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openswan-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-5.el5_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openswan-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openswan-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openswan-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-20.el6_4"}]}]}],"products":[{"vendor":"xelerance","product":"openswan"}],"references":[{"url":"https://www.openswan.org/news/13","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0827.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/59838","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=960229","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","article"]},{"url":"http://www.debian.org/security/2014/dsa-2893","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2053","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0827","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2053","tags":["report"]},{"url":"https://github.com/advisories/GHSA-xqwx-33f7-54m6"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0827.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2053","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-2053","description":"Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records.  NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.","status":"published","published":"2013-07-09T17:00:00Z","modified":"2024-08-06T15:20:37.42Z","updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-2035","description":"Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records.  NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.","status":"published","published":"2013-07-09T17:00:00Z","modified":"2024-08-06T15:20:37Z","updated_at":"2026-11-03T01:56:40.030926Z"}],"ghsa":[{"id":"GHSA-xqwx-33f7-54m6","title":"Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is...","description":"Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records.  NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.","status":"published","published":"2022-05-14T00:55:33Z","modified":"2023-02-10T05:06:14Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:54:01.286462Z"}],"nvd":[{"id":"CVE-2013-2053","description":"Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records.  NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.","status":"published","published":"2013-07-09T17:55:01.03Z","modified":"2026-06-16T23:52:39.543Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:29.210317Z"}],"osv":[{"id":"DSA-2893-1","title":"openswan - security update","status":"published","published":"2014-03-31T00:00:00Z","modified":"2026-03-09T01:21:11.864283Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"RHSA-2013:0827","title":"Red Hat Security Advisory: openswan security update","status":"published","published":"2024-09-15T20:52:21Z","modified":"2026-06-26T10:21:42Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}