Skip to main content

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-41913

High
9.8/10

Summary

In package strongSwan versions 5.3.0rc1 through 5.9.12rc1, and 6.0dr1 through 6.0.0beta4 contain a Buffer Overflow vulnerability, and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. An attack can occur via a crafted "IKE_SA_INIT" message.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References

Advisory Timeline

  • Published