{"id":"CVE-2013-6075","aliases":["DEBIAN-CVE-2013-6075","DSA-2789-1","EUVD-2013-5904","GHSA-pv47-47g7-w845","UBUNTU-CVE-2013-6075","openSUSE-SU-2024:10579-1"],"status":"published","title":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1)...","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02448,"percentile":0.84592,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-11-01T00:00:00Z","modified":"2026-09-01T20:03:18Z","fixes":[{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"strongswan","fixed_in":["4.4.1-5.4"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"strongswan","fixed_in":["4.5.2-1.5+deb7u2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-5.4"}]}],"versions":["4.4.1-5.1","4.4.1-5.2","4.4.1-5.3"]},{"source":"osv","ecosystem":"Debian:7","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-1.5+deb7u2"}]}],"versions":["4.5.2-1.5+deb7u1","4.5.2-1.5+deb7u2~bpo60+1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1.1"}]}],"bundled":11}],"products":[{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6075%29.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"http://download.strongswan.org/security/CVE-2013-6075/strongswan-4.3.3-5.1.0_id_dn_match.patch","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"http://www.debian.org/security/2012/dsa-2789","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6075"},{"url":"https://github.com/advisories/GHSA-pv47-47g7-w845"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-6075","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-6075","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6075","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8023","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-6075","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","status":"published","published":"2013-11-02T18:00:00Z","modified":"2024-09-16T22:52:14.06Z","updated_at":"2026-11-02T14:34:57.195423Z"}],"euvd":[{"id":"EUVD-2013-5904","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","status":"published","published":"2013-11-02T18:00:00Z","modified":"2024-09-16T22:52:14Z","updated_at":"2026-11-03T00:54:58.800859Z"}],"ghsa":[{"id":"GHSA-pv47-47g7-w845","title":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1)...","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","status":"published","published":"2022-05-17T04:57:44Z","modified":"2023-01-28T05:02:55Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:52.1532Z"}],"nvd":[{"id":"CVE-2013-6075","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","status":"published","published":"2013-11-02T18:55:03.283Z","modified":"2026-06-16T23:59:58.26Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"CVE-2013-6075","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","status":"published","published":"2013-11-02T18:55:03Z","modified":"2026-04-10T03:43:05.329792Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-6075","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","status":"published","published":"2013-11-02T18:55:03.283Z","modified":"2026-09-01T20:03:18.688212244Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DSA-2789-1","title":"strongswan - Denial of service and authorization bypass","status":"published","published":"2013-11-01T00:00:00Z","modified":"2026-03-09T01:21:39.216477Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"openSUSE-SU-2024:10579-1","title":"strongswan-5.3.5-1.1 on GA media","description":"These are all security issues fixed in the strongswan-5.3.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:32:44.74643Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"UBUNTU-CVE-2013-6075","description":"The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an \"insufficient length check\" during identity comparison.","status":"withdrawn","published":"2013-11-02T18:55:00Z","modified":"2025-07-16T07:31:26.69017Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}