CVE-2013-1428

Tincd - (Authenticated) Remote TCP Stack Buffer Overflow

Severity Score

6.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.

Desbordamiento de búfer en la función receive_tcppacket en net_packet.c en tinc anteriores a v1.0.21 y v1.1 anteriores a v1.1pre7 permite a pares de remotos
autenticados para provocar una denegación de servicio (caída) o posiblemente ejecutar código a través de paquetes TCP.

*Credits: N/A

CVSS Scores

NISTv2 6.5

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-01-26 CVE Reserved
2013-04-22 CVE Published
2014-12-02 First Exploit
2024-08-06 CVE Updated
2024-09-21 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (15)

URL	Tag	Source
http://freecode.com/projects/tinc/releases/354122	X_refsource_misc
http://osvdb.org/92653	Vdb Entry
http://www.securityfocus.com/bid/59369	Vdb Entry
http://www.tinc-vpn.org/news	X_refsource_confirm
https://github.com/gsliepen/tinc/commit/17a33dfd95b1a29e90db76414eb9622df9632320	X_refsource_confirm
http://www.floyd.ch/?p=741
http://sitsec.net/blog/2013/04/22/stack-based-buffer-overflow-in-the-vpn-software-tinc-for-authenticated-peers

URL	Date	SRC
https://www.exploit-db.com/exploits/35441	2014-12-02

URL	Date	SRC

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105531.html	2013-12-01
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105559.html	2013-12-01
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106167.html	2013-12-01
http://secunia.com/advisories/53087	2013-12-01
http://secunia.com/advisories/53108	2013-12-01
http://www.debian.org/security/2013/dsa-2663	2013-12-01
http://www.tinc-vpn.org/pipermail/tinc/2013-April/003240.html	2013-12-01

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				<= 1.0.20 Search vendor "Tinc-vpn" for product "Tinc" and version " <= 1.0.20"		-		Affected
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				<= 1.1 Search vendor "Tinc-vpn" for product "Tinc" and version " <= 1.1"		pre6		Affected
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				1.0.17 Search vendor "Tinc-vpn" for product "Tinc" and version "1.0.17"		-		Affected
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				1.0.18 Search vendor "Tinc-vpn" for product "Tinc" and version "1.0.18"		-		Affected
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				1.0.19 Search vendor "Tinc-vpn" for product "Tinc" and version "1.0.19"		-		Affected
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				1.1 Search vendor "Tinc-vpn" for product "Tinc" and version "1.1"		pre3		Affected
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				1.1 Search vendor "Tinc-vpn" for product "Tinc" and version "1.1"		pre4		Affected
Tinc-vpn Search vendor "Tinc-vpn"		Tinc Search vendor "Tinc-vpn" for product "Tinc"				1.1 Search vendor "Tinc-vpn" for product "Tinc" and version "1.1"		pre5		Affected