CVE-2013-1428

A remote authenticated peer can send a large TCP packet to the vulnerable `tincd` service. This oversized packet triggers a buffer overflow in the `receive_tcppacket` function within `net_packet.c`. The overflow can lead to a denial of service by crashing the service, or potentially allow for arbitrary code execution [ref_id=1].

The vulnerability resides in the `receive_tcppacket` function located in the `net_packet.c` file. This function is responsible for handling incoming TCP packets. The overflow occurs due to insufficient bounds checking when processing these packets.

The patch, identified by [patch_id=880], addresses the stack-based buffer overflow vulnerability. While the specific code changes are not detailed in the provided information, the fix is intended to properly validate the size of incoming TCP packets before they are processed, preventing the overflow condition in the `receive_tcppacket` function. This ensures that data is not written beyond the allocated buffer boundaries.