Skip to content
Sign in
7.8 High

CVE-2019-5164 An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2

Description

An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Shadowsocks Versions not published

Other CVEs of Shadowsocks

The 3 CVEs of Shadowsocks →
CVE-2019-5152 An exploitable information disclosure vulnerability exists in the network packet handling functionality of… 7.4 High CVE-2019-5163 An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2 5.9 Medium
Track this CVE