Vulnerabilities (CVE)

Filtered by vendor Tinc-vpn Subscribe
Filtered by product Tinc
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16758 2 Debian, Tinc-vpn 2 Debian Linux, Tinc 2019-10-03 4.3 MEDIUM 5.9 MEDIUM
Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.
CVE-2018-16737 1 Tinc-vpn 1 Tinc 2019-01-03 5.0 MEDIUM 5.3 MEDIUM
tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.