Skip to content
Sign in
7.4 High

CVE-2019-5152 An exploitable information disclosure vulnerability exists in the network packet handling functionality of…

Description

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Shadowsocks Versions not published

Other CVEs of Shadowsocks

The 3 CVEs of Shadowsocks →
CVE-2019-5164 An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2 7.8 High CVE-2019-5163 An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2 5.9 Medium
Track this CVE