CVE-2023-41913 Memory corruption in n/a

Critical 9.8 Published 7 Dec 2023 Updated 18 Dec 2025

Unauthenticated remote attackers can execute arbitrary code via a buffer overflow in strongSwan's charon-tkm DH proxy.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-41913?

CVE-2023-41913 is a critical memory corruption vulnerability in n/a, published on 7 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.

Weakness: CWE-120

Which versions are affected by CVE-2023-41913?

It affects 1 product.

Linux distribution packages (19)

`strongswan` SUSE:Enterprise Storage 7.1	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS	All versions	`5.8.2-150000.4.23.2`
`strongswan` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise Module for Basesystem 15 SP4	All versions	`5.9.11-150400.19.17.2`
`strongswan` SUSE:Linux Enterprise Module for Basesystem 15 SP5	All versions	`5.9.11-150500.5.6.1`
`strongswan` SUSE:Linux Enterprise Module for Package Hub 15 SP4	All versions	`5.9.11-150400.19.17.2`
`strongswan` SUSE:Linux Enterprise Module for Package Hub 15 SP5	All versions	`5.9.11-150500.5.6.1`
`strongswan` SUSE:Linux Enterprise Server 15 SP1-LTSS	All versions	`5.8.2-150000.4.23.2`
`strongswan` SUSE:Linux Enterprise Server 15 SP2-LTSS	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise Server 15 SP3-LTSS	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise Server for SAP Applications 15 SP1	All versions	`5.8.2-150000.4.23.2`
`strongswan` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	All versions	`5.8.2-150200.11.42.2`
`strongswan` SUSE:Linux Enterprise Workstation Extension 15 SP4	All versions	`5.9.11-150400.19.17.2`
`strongswan` SUSE:Linux Enterprise Workstation Extension 15 SP5	All versions	`5.9.11-150500.5.6.1`
`strongswan` openSUSE:Leap 15.4	All versions	`5.9.11-150400.19.17.2`
`strongswan` openSUSE:Leap 15.5	All versions	`5.9.11-150500.5.6.1`

Products include Strongswan Strongswan.

How do I fix CVE-2023-41913?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-41913 being exploited?

There is no known exploitation of CVE-2023-41913 in the wild and no public exploit code.

Sources

Also known as ALPINE-CVE-2023-41913, AZL-32071, AZL-35287, DEBIAN-CVE-2023-41913, DLA-3663-1, DSA-5560-1 and 10 more.