Back to Database
Status published
Medium
CVE-2013-1428
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in...
Vulnerability Description
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-1428
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/gsliepen/tinc/commit/17a33dfd95b1a29e90db76414eb9622df9632320
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105559.html
- http://www.tinc-vpn.org/pipermail/tinc/2013-April/003240.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106167.html
- http://www.tinc-vpn.org/news/
- http://osvdb.org/92653
- http://secunia.com/advisories/53087
- http://secunia.com/advisories/53108
- http://www.debian.org/security/2013/dsa-2663
- http://www.securityfocus.com/bid/59369
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105531.html
- http://freecode.com/projects/tinc/releases/354122
More from tinc-vpn
View All →Affected Vendor
tinc-vpn
View all reports →Affected Software
tinc
Vulnerable Versions:
0, 1.0.17, 1.0.18, 1.0.19, 1.1
Timeline
Official Publish:
April 26th, 2013
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.