{"id":"CVE-2023-41913","aliases":["ALPINE-CVE-2023-41913","AZL-32071","AZL-35287","DEBIAN-CVE-2023-41913","DLA-3663-1","DSA-5560-1","EUVD-2023-46391","GHSA-g7mg-4vgp-5j3h","MGASA-2024-0216","OESA-2023-1945","SUSE-SU-2023:4514-1","SUSE-SU-2023:4515-1","SUSE-SU-2023:4516-1","SUSE-SU-2023:4529-1","UBUNTU-CVE-2023-41913","USN-6488-1","USN-6488-2"],"status":"published","title":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution...","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0229,"percentile":0.83376,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-11-20T00:00:00Z","modified":"2026-10-28T02:30:54Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"strongswan","fixed_in":["5.9.12-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"strongswan","fixed_in":["5.9.10-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"strongswan","fixed_in":["5.9.12-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.9.8-5+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["5.9.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["5.9.12-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"strongswan","fixed_in":["5.7.2-1+deb10u4"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"strongswan","fixed_in":["5.9.1-1+deb11u4"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"strongswan","fixed_in":["5.9.14-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","fixed_in":["5.7.2-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"strongswan","fixed_in":["5.7.2-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"strongswan","fixed_in":["5.7.2-11.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"strongswan","fixed_in":["5.9.7-5.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"strongswan","fixed_in":["5.9.7-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"strongswan","fixed_in":["5.9.7-5.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"strongswan","fixed_in":["5.9.11-150400.19.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"strongswan","fixed_in":["5.9.11-150400.19.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"strongswan","fixed_in":["5.9.11-150400.19.17.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"strongswan","fixed_in":["5.9.11-150400.19.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"strongswan","fixed_in":["5.8.2-150200.11.42.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"strongswan","fixed_in":["5.8.2-150000.4.23.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"strongswan","fixed_in":["5.8.2-150000.4.23.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"strongswan","fixed_in":["5.8.2-150000.4.23.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"strongswan","fixed_in":["5.9.11-150500.5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"strongswan","fixed_in":["5.9.11-150500.5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"strongswan","fixed_in":["5.9.11-150500.5.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"strongswan","fixed_in":["5.9.11-150500.5.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","fixed_in":["5.3.5-1ubuntu3.8+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"strongswan","fixed_in":["5.6.2-1ubuntu2.9+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","fixed_in":["5.8.2-1ubuntu3.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","fixed_in":["5.9.5-2ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.9.12-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.10-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.12-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-5+deb12u1"}]}],"versions":["5.9.8-5"]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.12-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-1+deb10u4"}]}],"versions":["5.7.2-1","5.7.2-1+deb10u1","5.7.2-1+deb10u2","5.7.2-1+deb10u3"]},{"source":"osv","ecosystem":"Debian:11","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1+deb11u4"}]}],"versions":["5.9.1-1","5.9.1-1+deb11u1","5.9.1-1+deb11u2","5.9.1-1+deb11u3"]},{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-5+deb12u1"}]}],"versions":["5.9.8-5"]},{"source":"osv","ecosystem":"Mageia:9","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.14-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.2-11.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.7-5.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.7-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.7-5.oe2203sp2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.17.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150200.11.42.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150000.4.23.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150000.4.23.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-150000.4.23.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm4"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1","5.3.5-1ubuntu3.8+esm2","5.3.5-1ubuntu3.8+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.9+esm1"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7","5.6.2-1ubuntu2.8","5.6.2-1ubuntu2.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.6"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3","5.8.2-1ubuntu3.4","5.8.2-1ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.2"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2","5.9.5-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1ubuntu3.6"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3","5.8.2-1ubuntu3.4","5.8.2-1ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.2"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2","5.9.5-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.5-1ubuntu3.8+esm4"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1","5.3.5-1ubuntu3.8+esm2","5.3.5-1ubuntu3.8+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1ubuntu2.9+esm1"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7","5.6.2-1ubuntu2.8","5.6.2-1ubuntu2.9"]}],"products":[{"vendor":"strongswan","product":"strongswan"}],"references":[{"url":"https://github.com/strongswan/strongswan/releases","tags":["x_transferred","Release Notes","package"]},{"url":"https://www.strongswan.org/blog/2023/11/20/strongswan-vulnerability-%28cve-2023-41913%29.html","tags":["x_transferred","Vendor Advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250117-0003/","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO/","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00018.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41913","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO"},{"url":"https://security.netapp.com/advisory/ntap-20250117-0003"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO"},{"url":"https://github.com/advisories/GHSA-g7mg-4vgp-5j3h"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-41913","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41913.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-41913","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0216.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33286","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1945","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234514-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216901","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41913","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234515-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234516-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234529-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-41913","tags":["report"]},{"url":"https://www.strongswan.org/blog/2023/11/20/strongswan-vulnerability-(cve-2023-41913).html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6488-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6488-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41913","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-41913","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T00:00:00Z","modified":"2025-12-18T15:29:57.805Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:19.217111Z"}],"euvd":[{"id":"EUVD-2023-46391","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T00:00:00Z","modified":"2025-12-18T15:29:57Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:03.071772Z"}],"ghsa":[{"id":"GHSA-g7mg-4vgp-5j3h","title":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution...","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T06:30:20Z","modified":"2025-11-04T21:30:50Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:04:36.009389Z"}],"nvd":[{"id":"CVE-2023-41913","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T05:15:09.173Z","modified":"2026-06-17T06:23:03.493Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:54.010507Z"}],"osv":[{"id":"ALPINE-CVE-2023-41913","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T05:15:09.173Z","modified":"2026-10-26T17:17:58.639244435Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-32071","title":"CVE-2023-41913 affecting package strongswan for versions less than 5.9.10-3","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T05:15:09Z","modified":"2026-04-21T04:26:38.773816Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-35287","title":"CVE-2023-41913 affecting package strongswan for versions less than 5.9.12-1","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T05:15:09Z","modified":"2026-04-21T04:47:30.471228Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2023-41913","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T00:00:00Z","modified":"2026-10-28T02:30:54.765983399Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-41913","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-12-07T05:15:09.173Z","modified":"2026-10-26T18:02:32.821212954Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"OESA-2023-1945","title":"strongswan security update","description":"The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel.\r\n\r\nSecurity Fix(es):\r\n\r\nstrongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm\u0026apos;s DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.(CVE-2023-41913)","status":"published","published":"2023-12-22T11:06:23Z","modified":"2026-08-18T01:18:07.331633093Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"UBUNTU-CVE-2023-41913","description":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.","status":"published","published":"2023-11-20T13:00:00Z","modified":"2026-02-04T02:51:11.233437Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"DLA-3663-1","title":"strongswan - security update","status":"published","published":"2023-11-24T00:00:00Z","modified":"2026-03-09T01:21:35.062557Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5560-1","title":"strongswan - security update","status":"published","published":"2023-11-20T00:00:00Z","modified":"2026-03-09T02:10:28.299442Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0216","title":"Updated strongswan packages fix security vulnerability","description":"Fixes CVE-2023-41913 buffer overflow and possible RCE, various IKEv2\nimprovements\n","status":"published","published":"2024-06-12T16:09:34Z","modified":"2026-04-16T04:42:01.129421082Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2023:4514-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).\n","status":"published","published":"2023-11-21T16:27:20Z","modified":"2026-02-04T02:16:03.024568Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4515-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).\n","status":"published","published":"2023-11-21T16:29:06Z","modified":"2026-02-04T02:51:05.612369Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4516-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).\n","status":"published","published":"2023-11-21T16:29:38Z","modified":"2026-02-04T02:28:36.533494Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4529-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).\n","status":"published","published":"2023-11-22T13:40:40Z","modified":"2025-05-02T04:35:24.247885Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6488-1","title":"strongswan vulnerability","description":"Florian Picca discovered that strongSwan incorrectly handled certain DH\npublic values. A remote attacker could use this issue to cause strongSwan\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2023-11-20T15:46:14Z","modified":"2026-02-10T04:43:25Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6488-2","title":"strongswan vulnerability","description":"USN-6488-1 fixed a vulnerability in strongSwan. This update provides\nthe corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Florian Picca discovered that strongSwan incorrectly handled certain DH\n public values. A remote attacker could use this issue to cause strongSwan\n to crash, resulting in a denial of service, or possibly execute arbitrary\n code.\n","status":"published","published":"2023-12-14T21:21:52Z","modified":"2026-06-25T13:31:35.088730902Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}