Read the docs

Shadowsocks

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Shadowsocks records in CISA KEV

No Shadowsocks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shadowsocks-libev 4 records LOW Shadowsocksx-ng 1 record MEDIUM

Records

4 records in Shadowsocks-libev · all components

TI-2019-03619 CVE-2019-5163 · GHSA-vc3w-rpc8-4w8g

Missing authentication in Shadowsocks

Priority LOW 38

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02664 Published 2019-12-03 No fix listed CWE-306
TI-2017-11659 CVE-2017-15924 · GHSA-mvjw-f63r-3gxc

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command…

Priority LOW 37

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, bui…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01284 Published 2017-10-27 No fix listed CWE-78
TI-2019-03620 CVE-2019-5164 · GHSA-rcm9-p88f-cmqm

Missing authentication in Shadowsocks

Priority LOW 35

An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0077 Published 2019-12-03 No fix listed CWE-306
TI-2019-03608 CVE-2019-5152 · GHSA-pmr7-f238-jxqj

Missing authentication in Shadowsocks

Priority LOW 35

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01391 Published 2019-12-18 No fix listed CWE-306
Open these records in search →