Unrated severityNVD Advisory· Published Jan 7, 2014· Updated Jun 16, 2026

CVE-2013-4564

Description

Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libreswan/Libreswan2 versions
cpe:2.3:a:libreswan:libreswan:3.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libreswan:libreswan:3.6:*:*:*:*:*:*:*
- (no CPE)range: =3.6

Patches

Vulnerability mechanics

References

lists.libreswan.org/pipermail/swan-announce/2013/000007.htmlnvdPatchVendor Advisory
secunia.com/advisories/56276nvdVendor Advisory
libreswan.org/security/CVE-2013-4564/CVE-2013-4564.txt.ascnvdVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2013-December/124911.htmlnvd
lists.fedoraproject.org/pipermail/package-announce/2013-December/124928.htmlnvd
lists.fedoraproject.org/pipermail/package-announce/2013-December/124943.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000