What’s Vulnerable › Vulnerabilities

CVE-2013-6466

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-26 · updated 2026-06-17

Description

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.

Affected products

• Xelerance Openswan: through 2.6.39; 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.4.2, 2.4.3 (+69)

References

• http://rhn.redhat.com/errata/RHSA-2014-0185.html
• http://www.debian.org/security/2014/dsa-2893
• http://www.securityfocus.com/bid/65155
• https://cert.vde.com/en-us/advisories/vde-2017-001
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90524
• https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt
• http://rhn.redhat.com/errata/RHSA-2014-0185.html
• http://www.debian.org/security/2014/dsa-2893
• http://www.securityfocus.com/bid/65155
• https://cert.vde.com/en-us/advisories/vde-2017-001
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90524
• https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt

Get alerted when CVE-2013-6466 or the next vulnerability affects your stack