CVE-2019-5152: High severity shadowsocks vulnerability
An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-5152?
CVE-2019-5152 is an information disclosure vulnerability that exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.
How does CVE-2019-5152 impact the Shadowsocks-libev software?
CVE-2019-5152 can allow an attacker to cause an outbound connection from the server, resulting in information disclosure.
What is the severity of CVE-2019-5152?
CVE-2019-5152 has a severity rating of 7.4 (High).
Which version of Shadowsocks-libev is affected by CVE-2019-5152?
CVE-2019-5152 affects Shadowsocks-libev version 3.3.2.
How can I fix CVE-2019-5152?
To fix CVE-2019-5152, it is recommended to update Shadowsocks-libev to a version that has addressed the vulnerability.