PT-2018-13714 · Tinc+1 · Tinc+1

Michael Yonli · Publicado 2018-10-08 · Atualizado 2022-10-25 · CVE-2018-16738

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions tinc versions 1.0.30 through 1.0.34

Description The issue concerns a broken authentication protocol. Although there is a partial mitigation available, the problem is fully resolved in version 1.1.

Recommendations For versions 1.0.30 through 1.0.34, update to version 1.1 to fully resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

ALT-PU-2018-2454

CVE-2018-16738

DSA-4312-1

Produtos afetados

Alt Linux

Tinc

Referências · 15

• http://tinc-vpn.org/git/browse?p=tinc;a=commit;h=d3297fbd3b8c8c8a4661f5bbf89aca5cacba8b5a · Nota
• https://cve.org/CVERecord?id=CVE-2018-16738 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-16738 · Aviso do Fabricante
• http://tinc-vpn.org/git/browse?p=tinc%3Ba=commit%3Bh=d3297fbd3b8c8c8a4661f5bbf89aca5cacba8b5a · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-16738 · Nota de Segurança
• https://starwindsoftware.com/security/sw-20190227-0002 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2018-16738 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-16738 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-16738 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4312-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-16738 · Aviso do Fabricante
• https://debian.org/security/2018/dsa-4312 · Aviso do Fabricante
• http://tinc-vpn.org/security · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2018-16738 · Nota
• https://osv.dev/vulnerability/CVE-2018-16738 · Aviso do Fabricante