CVE-2019-5152

 

Published at: - 18-12-2019 04:15

Last modified: - 17-06-2022 03:18

Total changes: - 5

Description

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

 

Verification logic

 

Reference

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0942

 

Keywords

NVD

 

CVE-2019-5152

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures