CVE-2013-1428: tinc-vpn tinc

CVSS: 6.5v2.0MediumModified

AliasesUBUNTU-CVE-2013-1428DEBIAN-CVE-2013-1428DSA-2663-1

Published 26-04-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-1428 is a medium (CVSS 6.5) vulnerability in tinc-vpn tinc. EPSS estimates a 60.68% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

48/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.5/10

010

Medium · v2.0 (NVD)

EPSS score

60.68%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2exploit-database, metasploit

Timeline

26-04-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.

CVSS metrics

1 score · 1 source · 1 version

v2.06.5

EPSS trend

Probability

60.68%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 60.68% on 18-09-2026

18-09-202618-10-2026

EPSS score

60.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaseremotemultipleVerified
Tincd - (Authenticated) Remote TCP Stack Buffer Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteUnverified
Tincd Post-Authentication Remote TCP Stack Buffer Overflow
exploit/multi/vpn/tincd_bof
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Debian1 product

tinc< 1.0.19-3 | < 1.0.13-1+squeeze1

Tinc-vpn1 product

tinc≤ 1.0.20 | ≤ 1.1 | 1.0.17 | 1.0.18 | 1.0.19 | 1.1:pre3 | 1.1:pre4 | 1.1:pre5

Ubuntu1 product

tinc< 1.0.23-2

3 vendors · 3 products

References

15 links

github.com/gsliepen/tinc/commit/17a33dfd95b1a29e90db76414eb9622df9632320X Refsource CONFIRM
lists.fedoraproject.org/pipermail/package-announce/2013-May/105559.htmlVendor AdvisoryX Refsource FEDORA
www.tinc-vpn.org/pipermail/tinc/2013-April/003240.htmlMailing ListX Refsource MLISTVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2013-May/106167.htmlVendor AdvisoryX Refsource FEDORA
www.tinc-vpn.org/news/X Refsource CONFIRM
osvdb.org/92653VDB EntryX Refsource OSVDB
secunia.com/advisories/53087Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/53108Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2013/dsa-2663Vendor AdvisoryX Refsource DEBIAN
www.securityfocus.com/bid/59369VDB EntryX Refsource BID

Show all 15 references

lists.fedoraproject.org/pipermail/package-announce/2013-May/105531.htmlVendor AdvisoryX Refsource FEDORA
freecode.com/projects/tinc/releases/354122X Refsource MISC
ubuntu.com/security/CVE-2013-1428REPORT
www.cve.org/CVERecord?id=CVE-2013-1428REPORT
security-tracker.debian.org/tracker/CVE-2013-1428Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities