i2pd

注意：i2pd 的 Android 版本可在i2pd-android 仓库中找到；带 Qt GUI 的版本可在 i2pd-qt 仓库中找到。对于 macOS，一个带 GUI 的版本可在 gui-i2pd 仓库中找到。 i2pd Русская версия i2pd（I2P 守护进程）是一个功能完备的 I2P 客户端 C++ 实现。 I2P（隐形互联网协议）是一个通用的匿名网络层。 所有通过 I2P 的通信都是匿名且端到端加密的，参与者不会暴露其真实 IP 地址。 I2P 客户端是用于构建和使用匿名 I2P 网络的软件。...

Internet Bug Bounty: GarlicRust - heartbleed style vulnerability in major I2P C++ router implementations

Brief ----- I2pd and kovri are both C++ I2P routers that share the same code base, as kovri was forked from i2pd several years ago. The vulnerability lies in a common code piece, making both implementations vulnerable, as was acknowledged by orignal, the main developer of i2pd. The vulnerability ...

CVE-2017-17066

The 1 i2pd before 2.17 and 2 kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated...

CVE-2017-17066

The 1 i2pd before 2.17 and 2 kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated...

CVE-2017-17066

The 1 i2pd before 2.17 and 2 kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated...

CVE-2017-17066

Summary: CVE-2017-17066 affects i2pd before 2.17 and kovri pre-alpha implementations. The GarlicRust flaw arises in handling Garlic DeliveryTypeTunnel packets, where an unchecked length can lead to a buffer over-read and leakage of sensitive memory. The connected sources describe the vulnerable c...

CVE-2017-17066

The 1 i2pd before 2.17 and 2 kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated...