NVD

Id
37634  
Name
CVE-2013-1428  
Description
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-04-26  
Modified Date
2013-11-30  
Seq
2013-1428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191442 37634 CVE-2013-1428 http://freecode.com/projects/tinc/releases/354122  View
191443 37634 CVE-2013-1428 FEDORA-2013-7128  View
191444 37634 CVE-2013-1428 FEDORA-2013-7120  View
191445 37634 CVE-2013-1428 FEDORA-2013-7085  View
191446 37634 CVE-2013-1428 DSA-2663  View
191447 37634 CVE-2013-1428 59369  View
191448 37634 CVE-2013-1428 http://www.tinc-vpn.org/news/  View
191449 37634 CVE-2013-1428 [tinc] 20130422 [Announcement] Tinc version 1.0.21 and 1.1pre7 released  View
191450 37634 CVE-2013-1428 https://github.com/gsliepen/tinc/commit/17a33dfd95b1a29e90db76414eb9622df9632320  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20925 JVNDB-2013-002500 tinc の net_packet.c におけるスタックベースのバッファオーバーフローの脆弱性 tinc の net_packet.c 内の receive_tcppacket 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-1428 61370 CVE-2013-1428 37634 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002500.html 2013-04-22 2013-12-05 View