CVE-2013-1428
Tincd - (Authenticated) Remote TCP Stack Buffer Overflow
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.
Desbordamiento de búfer en la función receive_tcppacket en net_packet.c en tinc anteriores a v1.0.21 y v1.1 anteriores a v1.1pre7 permite a pares de remotos autenticados para provocar una denegación de servicio (caída) o posiblemente ejecutar código a través de paquetes TCP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-01-26 CVE Reserved
- 2013-04-26 CVE Published
- 2014-12-01 First Exploit
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (16)
| URL | Tag | Source |
|---|---|---|
| http://freecode.com/projects/tinc/releases/354122 | X_refsource_misc | |
| http://osvdb.org/92653 | Vdb Entry | |
| http://www.securityfocus.com/bid/59369 | Vdb Entry | |
| http://www.tinc-vpn.org/news | X_refsource_confirm | |
| https://github.com/gsliepen/tinc/commit/17a33dfd95b1a29e90db76414eb9622df9632320 | X_refsource_confirm | |
| http://www.floyd.ch/?p=741 | ||
| http://sitsec.net/blog/2013/04/22/stack-based-buffer-overflow-in-the-vpn-software-tinc-for-authenticated-peers |
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/129343 | 2014-12-01 | |
| https://www.exploit-db.com/exploits/35441 | 2014-12-02 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | <= 1.0.20 Search vendor "Tinc-vpn" for product "Tinc" and version " <= 1.0.20" | - |
Affected
| ||||||
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | <= 1.1 Search vendor "Tinc-vpn" for product "Tinc" and version " <= 1.1" | pre6 |
Affected
| ||||||
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | 1.0.17 Search vendor "Tinc-vpn" for product "Tinc" and version "1.0.17" | - |
Affected
| ||||||
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | 1.0.18 Search vendor "Tinc-vpn" for product "Tinc" and version "1.0.18" | - |
Affected
| ||||||
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | 1.0.19 Search vendor "Tinc-vpn" for product "Tinc" and version "1.0.19" | - |
Affected
| ||||||
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | 1.1 Search vendor "Tinc-vpn" for product "Tinc" and version "1.1" | pre3 |
Affected
| ||||||
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | 1.1 Search vendor "Tinc-vpn" for product "Tinc" and version "1.1" | pre4 |
Affected
| ||||||
| Tinc-vpn Search vendor "Tinc-vpn" | Tinc Search vendor "Tinc-vpn" for product "Tinc" | 1.1 Search vendor "Tinc-vpn" for product "Tinc" and version "1.1" | pre5 |
Affected
| ||||||