CVE-2013-1428: Buffer Overflow
Published Apr 26, 2013
·Updated
Stack-based buffer overflow in the receivetcppacket function in netpacket.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.
Affected Software
8 affected components
Tinc-vpn Tinc<=1.0.20
Tinc-vpn Tinc<=1.1
Tinc-vpn Tinc=1.0.17
Tinc-vpn Tinc=1.0.18
Tinc-vpn Tinc=1.0.19
Tinc-vpn Tinc=1.1-pre3
Tinc-vpn Tinc=1.1-pre4
Tinc-vpn Tinc=1.1-pre5
Event History
Apr 26, 2013
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1428?
CVE-2013-1428 is considered a high severity vulnerability due to its potential for denial of service and arbitrary code execution.
2
How do I fix CVE-2013-1428?
To fix CVE-2013-1428, update tinc to version 1.0.21 or later, or 1.1pre7 or later.
3
What software versions are affected by CVE-2013-1428?
CVE-2013-1428 affects tinc versions prior to 1.0.21 and versions 1.1-pre6 and earlier.
4
What type of vulnerability is CVE-2013-1428?
CVE-2013-1428 is a stack-based buffer overflow vulnerability.
5
Can CVE-2013-1428 be exploited remotely?
Yes, CVE-2013-1428 can be exploited by remote authenticated peers through the sending of a large TCP packet.