Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pmr7-f238-jxqj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.

EPSS

Процентиль: 56%
0.00339
Низкий

7.4 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.4
ubuntu
около 6 лет назад

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.

CVSS3: 7.4
nvd
около 6 лет назад

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.

CVSS3: 7.4
debian
около 6 лет назад

An exploitable information disclosure vulnerability exists in the netw ...

EPSS

Процентиль: 56%
0.00339
Низкий

7.4 High

CVSS3

Дефекты

CWE-306