PatchTheCVEtinc-vpn vulnerabilities
Recent CVEs affecting tinc-vpn products. 3 tracked.
tinc-vpn has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-10-10. Highest priority: CVE-2018-16758 (score 46/100).
- CVE-2018-16758 MEDIUM 5.9 UPGRADE MITIGATE Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the
- CVE-2018-16738 LOW 3.7 UPGRADE MITIGATE tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation
- CVE-2018-16737 MEDIUM 5.3 UPGRADE DOWNGRADE tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.
FAQ
How do I fix tinc-vpn vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tinc-vpn being exploited right now?
None of the tracked tinc-vpn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tinc-vpn CVE should I patch first?
CVE-2018-16758 currently ranks highest (46/100): Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the.