CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: mdbook, efs-utils, pixi, shadowsocks-rust, linkerd2, zola, linkerd2-proxy, jujutsu, uv, linkerd-extension-init, buck2...

CVE-2019-5163

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a localaddress, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this...

Linux Distros Unpatched Vulnerability : CVE-2019-5152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream...

CVE-2019-5152

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An...

CVE-2019-5164

An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger...

GHSA-WWQ9-3CPR-MM53 vulnerabilities

Vulnerabilities for packages: cedar, berg, buck2, wit-bindgen, tealdeer, nushell, starship, wasmcloud, wash, cargo-audit, pixi, shadowsocks-rust, xh, qdrant, linkerd2-proxy, wadm...

OPENSUSE-SU-2024:13893-1 shadowsocks-rust-1.18.3-1.1 on GA media

These are all security issues fixed in the shadowsocks-rust-1.18.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13315-1 shadowsocks-rust-1.16.2-1.1 on GA media

These are all security issues fixed in the shadowsocks-rust-1.16.2-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2017-15924

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the addserver, buildconfig, and constructcommandline functions...

SUSE CVE-2019-5163

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a localaddress, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this...

SUSE CVE-2019-5152

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An...

SUSE CVE-2019-5164

An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger...

Fedora: Security Advisory for golang-github-dreamacro-shadowsocks2 (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-dreamacro-shadowsocks2-0.1.7-7.fc36

Experimental Shadowsocks in Go. Stable fork at https://github.com/shadowsocks/go-shadowsocks2...

[SECURITY] Fedora 35 Update: golang-github-dreamacro-shadowsocks2-0.1.7-3.fc35

Experimental Shadowsocks in Go. Stable fork at https://github.com/shadowsocks/go-shadowsocks2...

Fedora: Security Advisory for golang-github-dreamacro-shadowsocks2 (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-dreamacro-shadowsocks2-0.1.7-6.fc36

Experimental Shadowsocks in Go. Stable fork at https://github.com/shadowsocks/go-shadowsocks2...

aes-keywrap-rs (>=0.1.0, <=0.2.0), shadowsocks-crypto (>=0.1.0, <=0.2.5) potentially affected by unknown CVE via crypto2 (0.1.2)

crypto2 CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on crypto2 and may be impacted: - aes-keywrap-rs =0.1.0, =0.1.0, =0.2.5 Source cves: unknown CVE Source advisory: GHSA-PMCV-MGCF-RVXG...

aes-keywrap-rs (>=0.1.0, <=0.2.0), shadowsocks-crypto (>=0.1.0, <=0.2.5) potentially affected by CVE-2021-45709 via crypto2 (0.1.2)

crypto2 CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on crypto2 and may be impacted: - aes-keywrap-rs =0.1.0, =0.1.0, =0.2.5 Source cves: CVE-2021-45709 Source advisory: OSV:GHSA-PMCV-MGCF-RVXG...

Mageia: Security Advisory (MGASA-2017-0436)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...