Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:10854
HistoryJan 15, 2019 - 8:53 a.m.

Remote Code Execution (RCE)

2019-01-1508:53:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18

EPSS

0.074

Percentile

94.1%

JSON

openswan is vulnerable to remote code execution (RCE) attacks. The vulnerability exists through a buffer overflow issue in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records.

Related

openvas 12
nessus 9
centos 1
oraclelinux 1
suse 1
amazon 1
redhat 1
gentoo 1
prion 3
cvelist 3
osv 1
nvd 3
ubuntucve 2
cve 3
debian 1
debiancve 2
securityvulns 2
openvas
openvas
CentOS Update for openswan CESA-2013:0827 centos5
2013-05-17 00:00:00
Gentoo Security Advisory GLSA 201401-09
2015-09-29 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-192)
2015-09-08 00:00:00
nessus
nessus
RHEL 5 / 6 : openswan (RHSA-2013:0827)
2013-05-16 00:00:00
Scientific Linux Security Update : openswan on SL5.x, SL6.x i386/x86_64 (20130515)
2013-05-16 00:00:00
SuSE 11.2 Security Update : openswan (SAT Patch Number 7925)
2013-07-06 00:00:00
centos
centos
openswan security update
2013-05-15 23:11:17
oraclelinux
oraclelinux
openswan security update
2013-05-15 00:00:00
suse
suse
Security update for openswan (important)
2013-07-05 18:04:14
amazon
amazon
Important: openswan
2013-05-24 13:56:00
redhat
redhat
(RHSA-2013:0827) Important: openswan security update
2013-05-15 00:00:00
gentoo
gentoo
Openswan: User-assisted execution of arbitrary code
2014-01-18 00:00:00
prion
prion
Buffer overflow
2013-07-09 17:55:00
Buffer overflow
2013-07-09 17:55:00
Buffer overflow
2013-07-09 17:55:00
cvelist
cvelist
CVE-2013-2054
2013-07-09 17:00:00
CVE-2013-2052
2013-07-09 17:00:00
CVE-2013-2053
2013-07-09 17:00:00
osv
osv
openswan - security update
2014-03-31 00:00:00
nvd
nvd
CVE-2013-2054
2013-07-09 17:55:01
CVE-2013-2052
2013-07-09 17:55:00
CVE-2013-2053
2013-07-09 17:55:01
ubuntucve
ubuntucve
CVE-2013-2054
2013-07-09 00:00:00
CVE-2013-2053
2013-07-09 00:00:00
cve
cve
CVE-2013-2054
2013-07-09 17:55:01
CVE-2013-2052
2013-07-09 17:55:00
CVE-2013-2053
2013-07-09 17:55:01
debian
debian
[SECURITY] [DSA 2893-1] openswan security update
2014-03-31 20:00:54
debiancve
debiancve
CVE-2013-2054
2013-07-09 17:55:01
CVE-2013-2052
2013-07-09 17:55:00
securityvulns
securityvulns
[SECURITY] [DSA 2893-1] openswan security update
2014-04-07 00:00:00
Openswan / Strongswan security vulnerabilities
2014-05-07 00:00:00

EPSS

0.074

Percentile

94.1%

JSON
Related for VERACODE:10854
openvas12nessus9centos1oraclelinux1suse1amazon1redhat1gentoo1prion3cvelist3osv1nvd3ubuntucve2cve3debian1debiancve2securityvulns2