An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger this vulnerability.
CPE | Name | Operator | Version |
---|---|---|---|
backports_sle | eq | 15.0 sp1 | |
leap | eq | 15.1 | |
shadowsocks-libev | eq | 3.3.2 |