CVE-2023-36325

i2p before 2.3.0 Java allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services aka eepsites via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy it may be dropped, or may result in a Wrong...

CVE-2023-36325

Removed by vendor...

CVE-2023-36325

The i2p anonymity networking project (versions before 2.3.0 ) is vulnerable to a correlation attack that can de-anonymize the public IPv4 and IPv6 addresses of i2p hidden services (eepsites). The root cause is a behavior discrepancy occurring when a tunneled, replayed message is processed, potent...