Описание
Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 1.0.35-2build1 |
| disco | not-affected | 1.0.35-2 |
| eoan | not-affected | 1.0.35-2build1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 1.0.35-2build1 |
| esm-apps/jammy | not-affected | 1.0.35-2build1 |
| esm-apps/noble | not-affected | 1.0.35-2build1 |
Показывать по
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3
Связанные уязвимости
Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.
Missing message authentication in the meta-protocol in Tinc VPN versio ...
Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.
ALT-PU-2018-2454: package `tinc` update to version 1.0.35-alt1
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3