Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Shadowsocks Component: Shadowsocks-libev Clear all filters
TI-2019-03608 CVE-2019-5152 · GHSA-pmr7-f238-jxqj

Missing authentication in Shadowsocks

Priority LOW 35

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01391 Published 2019-12-18 No fix listed CWE-306
TI-2019-03620 CVE-2019-5164 · GHSA-rcm9-p88f-cmqm

Missing authentication in Shadowsocks

Priority LOW 35

An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0077 Published 2019-12-03 No fix listed CWE-306
TI-2019-03619 CVE-2019-5163 · GHSA-vc3w-rpc8-4w8g

Missing authentication in Shadowsocks

Priority LOW 38

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02664 Published 2019-12-03 No fix listed CWE-306
TI-2017-11659 CVE-2017-15924 · GHSA-mvjw-f63r-3gxc

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command…

Priority LOW 37

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, bui…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01284 Published 2017-10-27 No fix listed CWE-78