CVE-2013-1428
Fixed in a distro release EPSS 61%
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.
Products: tinc-vpn tinc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tinc | 1.0.19-3 |
| Debian 13 | tinc | 1.0.19-3 |
| Debian 14 | tinc | 1.0.19-3 |
| Debian 6.0 | tinc | 1.0.13-1+squeeze1 |