CVE-2013-6467: Null Pointer Dereference
Published Jan 26, 2014
·Updated
Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
Affected Software
8 affected components
libreswan Libreswan<=3.7
libreswan Libreswan=3.0
libreswan Libreswan=3.1
libreswan Libreswan=3.2
libreswan Libreswan=3.3
libreswan Libreswan=3.4
libreswan Libreswan=3.5
libreswan Libreswan=3.6
Event History
Jan 26, 2014
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:55 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6467?
CVE-2013-6467 has a moderate severity rating as it can lead to denial of service through IKE daemon restart.
2
How do I fix CVE-2013-6467?
To fix CVE-2013-6467, upgrade to Libreswan version 3.8 or later, which addresses this vulnerability.
3
Which versions are affected by CVE-2013-6467?
CVE-2013-6467 affects Libreswan versions 3.7 and earlier, including versions 3.0 through 3.6.
4
Can CVE-2013-6467 be exploited remotely?
Yes, CVE-2013-6467 can be exploited remotely by sending malformed IKEv2 packets.
5
What is the impact of CVE-2013-6467 on systems?
The impact of CVE-2013-6467 is a denial of service, causing the IKE daemon to crash and restart.