CVE-2013-1428: Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 be

Q: How do I fix CVE-2013-1428?

tinc: upgrade to newer than 1.1. Exact commands for each OS are on this page.

Q: Is CVE-2013-1428 being exploited?

CVE-2013-1428 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2013-1428 affect?

CVE-2013-1428 affects tinc. Severity is medium (CVSS 6.5). Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large

Q: How urgent is CVE-2013-1428?

Priority 58/100. EPSS top 1%: very likely to be exploited; Public exploit reference; On your watchlist

This week

MEDIUM 6.5WATCHLISTUPGRADE

CVE-2013-1428 is a medium-severity flaw (CVSS 6.5) affecting tinc. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet.

Why this priority

EPSS top 1%: very likely to be exploited
Public exploit reference
On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score	6.5 (Medium)
EPSS exploit chance	60.7% (top 1%)
CISA exploited list	No
Weakness	CWE-119
Published	2013-04-26
Last modified	2026-06-16

Publisher (CNA): Debian GNU/Linux · Vendor: tinc-vpn

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2013-04-26 16:55 UTCPublished CVE record published
2026-06-16 23:51 UTCUpdated Record last modified

tinc-vpn tinc UPGRADE

Affected: <= 1.0.20 · <= 1.1 · 1.0.17 · 1.0.18 · 1.0.19 · 1.1 pre3 · 1.1 pre4 · 1.1 pre5

Fixed in: newer than 1.1

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy tinc || rpm -q tinc || tinc --version

2. UPGRADE to newer than 1.1 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade tinc

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade tinc

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Exploit-DB: Tincd - (Authenticated) Remote TCP Stack Buffer Overflow (Metasploit)
Metasploit: Tincd Post-Authentication Remote TCP Stack Buffer Overflow

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2013-1428?

tinc: upgrade to newer than 1.1. Exact commands for each OS are on this page.

Is CVE-2013-1428 being exploited?

CVE-2013-1428 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2013-1428 affect?

CVE-2013-1428 affects tinc. Severity is medium (CVSS 6.5). Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large

How urgent is CVE-2013-1428?

Priority 58/100. EPSS top 1%: very likely to be exploited; Public exploit reference; On your watchlist

Related CVEs

CVE-2018-16758 MEDIUM 5.9 UPGRADE MITIGATE Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the
CVE-2018-16738 LOW 3.7 UPGRADE MITIGATE tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation
CVE-2018-16737 MEDIUM 5.3 UPGRADE DOWNGRADE tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.
CVE-2002-1755 MEDIUM 5.0 DOWNGRADE tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject
CVE-2001-1505 MEDIUM 5.0 DOWNGRADE tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying p

References

← Back to latest CVEs