CVE-2013-7283

Exploit

EPSS 0.33%
Published 09.01.2014 18:07:29
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file.

Affected products Warnungen 0 Metrics 2 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Libreswan ≫ Libreswan Version3.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.33%	0.552

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://secunia.com/advisories/56276

Vendor Advisory

https://lists.libreswan.org/pipermail/swan-announce/2013/000007.html

Vendor Advisory

http://www.osvdb.org/101575

https://github.com/libreswan/libreswan/commit/ef2d756e73a188401c36133c2e2f7ce4f3c6ae55

Patch

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2013-7283

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-7283

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-7283

EUVD