Starwind Virtual San CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2018-16758

Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Starwindsoftware Tinc-vpn

Products

Debian Linux Starwind Virtual San Tinc

CVE-2018-16738

tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1.

CVSS 3.1 · 3.7 Low EPSS 1.4% KEV · Not listed

Vendors

Debian Starwindsoftware Tinc-vpn

Products

Debian Linux Starwind Virtual San Tinc

CVE-2018-16737

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.

CVSS 3.1 · 5.3 Medium EPSS 1.5% KEV · Not listed

Vendors

Starwindsoftware Tinc-vpn

Products

Starwind Virtual San Tinc

« first previous Page 2 of 2.