Msrc Azl3 Strongswan 5.9.11-1 On Azure Linux 3.0 vulnerabilities

1 known vulnerability affecting msrc/azl3_strongswan_5.9.11-1_on_azure_linux_3.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2023-41913CRITICALCVSS 9.82023-12-12

CVE-2023-41913 [CRITICAL] CWE-120 strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT