Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vc3w-rpc8-4w8g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.

EPSS

Процентиль: 65%
0.00486
Низкий

7.5 High

CVSS3

Дефекты

CWE-306
CWE-327

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 6 лет назад

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.

CVSS3: 7.5
nvd
около 6 лет назад

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.

CVSS3: 7.5
debian
около 6 лет назад

An exploitable denial-of-service vulnerability exists in the UDPRelay ...

suse-cvrf
около 6 лет назад

Security update for shadowsocks-libev

EPSS

Процентиль: 65%
0.00486
Низкий

7.5 High

CVSS3

Дефекты

CWE-306
CWE-327