CVE-2023-41913: Buffer Overflow

Q: What is the severity of CVE-2023-41913?

CVE-2023-41913 is a high severity vulnerability that can lead to buffer overflow and potential unauthenticated remote code execution.

Q: How do I fix CVE-2023-41913?

To fix CVE-2023-41913, upgrade strongSwan to version 5.9.12 or later.

Q: Which versions of strongSwan are affected by CVE-2023-41913?

strongSwan versions from 5.3.0 up to and including 5.9.11 are affected by CVE-2023-41913.

Q: Can CVE-2023-41913 be exploited remotely?

Yes, CVE-2023-41913 can be exploited remotely through a crafted IKE_SA_INIT message.

Q: What is the impact of CVE-2023-41913?

The impact of CVE-2023-41913 includes possible remote code execution and compromise of the affected system.

Published Nov 20, 2023

Updated

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message.

Affected Software

9 affected componentsFixes available

ubuntu/strongswan<5.6.2-1ubuntu2.9+

5.6.2-1ubuntu2.9+

ubuntu/strongswan<5.8.2-1ubuntu3.6

5.8.2-1ubuntu3.6

ubuntu/strongswan<5.9.5-2ubuntu2.2

5.9.5-2ubuntu2.2

ubuntu/strongswan<5.9.8-3ubuntu4.1

5.9.8-3ubuntu4.1

ubuntu/strongswan<5.9.11-1ubuntu1.1

5.9.11-1ubuntu1.1

ubuntu/strongswan<5.9.12

5.9.12

ubuntu/strongswan<5.3.5-1ubuntu3.8+

5.3.5-1ubuntu3.8+

debian/strongswan<=5.7.2-1+deb10u2

5.7.2-1+deb10u45.9.1-1+deb11u45.9.8-5+deb12u15.9.13-2

strongSwan Strongswan>=5.3.0<5.9.12

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/strongswan to a version that resolves this vulnerability.
Fixed in 5.6.2-1ubuntu2.9+
Upgrade
Upgrade ubuntu/strongswan to a version that resolves this vulnerability.
Fixed in 5.8.2-1ubuntu3.6
Upgrade
Upgrade ubuntu/strongswan to a version that resolves this vulnerability.
Fixed in 5.9.5-2ubuntu2.2
Upgrade
Upgrade ubuntu/strongswan to a version that resolves this vulnerability.
Fixed in 5.9.8-3ubuntu4.1
Upgrade
Upgrade ubuntu/strongswan to a version that resolves this vulnerability.
Fixed in 5.9.11-1ubuntu1.1
Upgrade
Upgrade ubuntu/strongswan to a version that resolves this vulnerability.
Fixed in 5.9.12
Upgrade
Upgrade ubuntu/strongswan to a version that resolves this vulnerability.
Fixed in 5.3.5-1ubuntu3.8+
Upgrade
Upgrade debian/strongswan to a version that resolves this vulnerability.
Fixed in 5.7.2-1+deb10u4Fixed in 5.9.1-1+deb11u4Fixed in 5.9.8-5+deb12u1Fixed in 5.9.13-2
Upgrade
Upgrade strongSwan to a version that resolves this vulnerability.
Fixed in 5.9.12

Event History

Nov 20, 2023

CVE Published

via Ubuntu·12:00 AM

Dec 7, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2023-41913?

CVE-2023-41913 is a high severity vulnerability that can lead to buffer overflow and potential unauthenticated remote code execution.

How do I fix CVE-2023-41913?