VULNERABILITY INTELLIGENCE
CVE-2013-1428
CVSS score6.5 MEDIUM
EPSS probability60.68%
CISA KEVNot currently listed
Published2013-04-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Description
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer