{"id":"CVE-2013-6076","aliases":["DEBIAN-CVE-2013-6076","EUVD-2013-5905","GHSA-499g-gpw8-wmq3","openSUSE-SU-2024:10579-1"],"status":"published","title":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer...","description":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01868,"percentile":0.79455,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2013-11-02T18:00:00Z","modified":"2026-09-01T20:03:18Z","fixes":[{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.1.0-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1.1"}]}],"bundled":11}],"products":[{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6076%29.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6076"},{"url":"https://github.com/advisories/GHSA-499g-gpw8-wmq3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-6076","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8023","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-6076","description":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.","status":"published","published":"2013-11-02T18:00:00Z","modified":"2024-09-16T19:46:38.71Z","updated_at":"2026-11-02T14:34:57.195423Z"}],"euvd":[{"id":"EUVD-2013-5905","description":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.","status":"published","published":"2013-11-02T18:00:00Z","modified":"2024-09-16T19:46:38Z","updated_at":"2026-11-03T00:55:20.039201Z"}],"ghsa":[{"id":"GHSA-499g-gpw8-wmq3","title":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer...","description":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.","status":"published","published":"2022-05-17T04:57:44Z","modified":"2023-01-28T05:03:01Z","updated_at":"2026-11-02T14:43:53.587553Z"}],"nvd":[{"id":"CVE-2013-6076","description":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.","status":"published","published":"2013-11-02T18:55:03.297Z","modified":"2026-06-16T23:59:58.377Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"CVE-2013-6076","description":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.","status":"published","published":"2013-11-02T18:55:03Z","modified":"2026-04-10T03:43:05.377647Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-6076","description":"strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.","status":"published","published":"2013-11-02T18:55:03.297Z","modified":"2026-09-01T20:03:18.77344283Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"openSUSE-SU-2024:10579-1","title":"strongswan-5.3.5-1.1 on GA media","description":"These are all security issues fixed in the strongswan-5.3.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:32:44.74643Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}