Tinc
by Gsliepen
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-16758 | Med | 0.38 | 5.9 | 0.01 | Oct 10, 2018 | Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets. | ||
| CVE-2018-16737 | Med | 0.35 | 5.3 | 0.01 | Oct 10, 2018 | tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation. | ||
| CVE-2018-16738 | Low | 0.24 | 3.7 | 0.01 | Oct 10, 2018 | tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1. |
- risk 0.38cvss 5.9epss 0.01
Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.
- risk 0.35cvss 5.3epss 0.01
tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.
- risk 0.24cvss 3.7epss 0.01
tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1.