Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-5163
7.5
HIGHCVSS v3
Severity scale
010
Description
An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.
shadowsocks/shadowsocks-libev
GitHubBug-fix-only libev port of shadowsocks. Future development moved to shadowsocks-rust
GitHubBug-fix-only libev port of shadowsocks. Future development moved to shadowsocks-rust= 3.3.2NVD
Docker Hub