Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-41913

31
FAUCET Score

CVE-2023-41913 is a critical buffer overflow vulnerability affecting strongSwan versions prior to 5.9.12, specifically from version 5.3.0 onwards. This flaw allows for unauthenticated remote code execution through a crafted IKE_SA_INIT message containing an oversized Diffie-Hellman public value. With a CVSS score of 9.8, this vulnerability poses a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.3.0, < 5.9.12CPE matchmatch criteria
cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.31%
Probability of exploitation in next 30 days
EPSS Percentile
81.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0231 is in the 71st percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (10)

microsoftpatch availablevia msrc
Product: azl3 strongswan 5.9.11-1 on Azure Linux 3.0Fixed in: 5.9.12-1
microsoftpatch availablevia msrc
Product: azl3 strongswan 5.9.12-1 on Azure Linux 3.0Fixed in: 5.9.12-1
microsoftpatch availablevia msrc
Product: cbl2 strongswan 5.9.10-3 on CBL Mariner 2.0Fixed in: 5.9.10-3
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 5.9.10-3
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 5.9.10-3
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 5.9.12-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 5.9.12-1
microsoftpatch availablevia msrc
Product: 18241-16823Fixed in: 5.9.10-3
microsoftpatch availablevia msrc
Product: 20127-17084Fixed in: 5.9.12-1
microsoftpatch availablevia msrc
Product: 18242-17084Fixed in: 5.9.12-1

Vendor Advisories (2)

microsoft2024-Jun/CVE-2023-41913

CVE-2023-41913

Jun 11, 2024
microsoft2023-Dec/CVE-2023-41913Critical

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.

Dec 12, 2023

References

lists.debian.org / debian-lts-announce/2023/11/msg00018.html
lists.fedoraproject.org / archives/list/[email protected]/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO
security.netapp.com / advisory/ntap-20250117-0003
github.com / strongswan/strongswan/releases
Release Notes
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO
strongswan.org / blog/2023/11/20/strongswan-vulnerability-%28cve-2023-41913%29.html
Vendor Advisory