NetSight
IP …
medium6.5Public exploit code

CVE-2013-1428

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.

Affected products

VendorProductAffected versions
Tinc-VpnTinc
through 1.0.20
through 1.1
Versions 1.0.17, 1.0.18, 1.0.19, 1.1

Weakness classification

CWE-119

References