CVE-2013-2052

Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2053 and CVE-2013-2054.

• CWE-119

• https://libreswan.org/security/CVE-2013-2052/CVE-2013-2052.txtPatch, Vendor Advisory
• https://lists.libreswan.org/pipermail/swan-announce/2013/000003.htmlVendor Advisory
• https://libreswan.org/security/CVE-2013-2052/CVE-2013-2052.txtPatch, Vendor Advisory
• https://lists.libreswan.org/pipermail/swan-announce/2013/000003.htmlVendor Advisory

Published

Jul 9, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2046SQL injection vulnerability in lib/bookmarks.php in ownCloud…
• CVE-2013-2047The login page (aka index.php) in ownCloud before 5.0.6 does…
• CVE-2013-2048ownCloud before 5.0.6 does not properly check permissions, w…
• CVE-2013-2049Red Hat CloudForms 2 Management Engine (CFME) allows remote …
• CVE-2013-2050SQL injection vulnerability in the miq_policy controller in …
• CVE-2013-2051The Tomcat 6 DIGEST authentication functionality as used in …
• CVE-2013-2053Buffer overflow in the atodn function in Openswan before 2.6…
• CVE-2013-2054Buffer overflow in the atodn function in strongSwan 2.0.0 th…
• CVE-2013-2055Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.…
• CVE-2013-2056The Inter-Satellite Sync (ISS) operation in Red Hat Network …
• CVE-2013-2057YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local F…9.8
• CVE-2013-2058The host_start function in drivers/usb/chipidea/host.c in th…