p PatchFirst

CVE-2018-16737

CVE-2018-16737

This page contains facts from public vulnerability sources. Check the original advisory before updating.

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.

CVSS 5.3 · Medium · EPSS 1.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tinc Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0.31-1

    Update to 1.0.31-1

  • tinc Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.31-1

    Update to 1.0.31-1

  • tinc Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0.31-1

    Update to 1.0.31-1

  • tinc Ubuntu:16.04:LTS

    Versions
    • 1.0.26-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tinc Ubuntu:18.04:LTS

    Versions
    • 1.0.31-1
    • 1.0.32-1
    • 1.0.33-1
    • 1.0.33-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →