Tinc-vpn

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tinc-vpn records in CISA KEV

No Tinc-vpn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tinc 4 records MEDIUM

Records

4 records

TI-2013-01247 CVE-2013-1428 · GHSA-wp6j-qh23-g8mc

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc…

MEDIUM 63

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitr…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.60679 Published 2013-04-26 No fix listed CWE-119

TI-2018-11996 CVE-2018-16758 · GHSA-52p3-pmr5-f54r

Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and…

LOW 28

Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00947 Published 2018-10-10 No fix listed CWE-306

TI-2018-11985 CVE-2018-16737 · GHSA-86wc-mxwc-62wr

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.

LOW 27

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01472 Published 2018-10-10 No fix listed CWE-287

TI-2018-11986 CVE-2018-16738 · GHSA-c478-67p7-rg2p

tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a…

LOW 20

tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01355 Published 2018-10-10 No fix listed CWE-287

Open these records in search →

Critical	0
High	0
Medium	3
Low	1
No CVSS	0