CVE-2013-2053

no score yetEPSS 2.4%

xelerance openswan: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2013-07-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xelerance:openswan

References

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00008.html
http://rhn.redhat.com/errata/RHSA-2013-0827.html
http://www.debian.org/security/2014/dsa-2893
http://www.securityfocus.com/bid/59838
https://bugzilla.redhat.com/show_bug.cgi?id=960229

Check your stack JSON