Skip to content
Sign in
5.9 Medium

CVE-2019-5163 An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2

Description

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Shadowsocks Versions not published

Other CVEs of Shadowsocks

The 3 CVEs of Shadowsocks →
CVE-2019-5152 An exploitable information disclosure vulnerability exists in the network packet handling functionality of… 7.4 High CVE-2019-5164 An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2 7.8 High
Track this CVE