CVE-2013-2052

no score yetEPSS 1.8%

libreswan libreswan: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2053 and CVE-2013-2054.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2013-07-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

libreswan:libreswan

References

https://libreswan.org/security/CVE-2013-2052/CVE-2013-2052.txt
https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html
https://libreswan.org/security/CVE-2013-2052/CVE-2013-2052.txt
https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html

Check your stack JSON