Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4273-ccpv-pfm8

Опубликовано: 09 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.

i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.

EPSS

Процентиль: 45%
0.00227
Низкий

3.7 Low

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 3.7
ubuntu
больше 1 года назад

i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.

CVSS3: 3.7
nvd
больше 1 года назад

i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.

CVSS3: 3.7
debian
больше 1 года назад

i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 ...

EPSS

Процентиль: 45%
0.00227
Низкий

3.7 Low

CVSS3

Дефекты

CWE-203