Shadowsocks Shadowsocks-libev 3.3.2
Approved changes feed: RSS · Atom
cpe:2.3:a:shadowsocks:shadowsocks-libev:3.3.2:*:*:*:*:*:*:*
part: a version: 3.3.2 update: *
| Vendor | Shadowsocks (71a4f2d4-d62a-53c0-acd2-2066f6e8f218) |
|---|---|
| Product | Shadowsocks Libev (8fd22fbb-352a-56c8-9cc5-fb783084ee02) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/shadowsocks-libev |
purl2cpe | 2026-06-01 10:11:40.692314 |
pkg:deb/ubuntu/shadowsocks-libev |
purl2cpe | 2026-06-01 10:11:40.692316 |
pkg:docker/shadowsocks/shadowsocks-libev |
purl2cpe | 2026-06-01 10:11:40.692317 |
pkg:github/shadowsocks/shadowsocks-libev |
purl2cpe | 2026-06-01 10:11:40.692320 |
pkg:github/shadowsocksr-backup/shadowsocksr-libev |
purl2cpe | 2026-06-01 10:11:40.692318 |
pkg:rpm/opensuse/shadowsocks-libev |
purl2cpe | 2026-06-01 10:11:40.692321 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-5164 |
vulnerable | 2026-06-08 05:13:57.781869 |
Details available
HIGH (7.8)
An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger this vulnerability.
Published: 2019-12-03T21:56:21.000Z
Updated: 2024-08-04T19:47:56.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5163 |
vulnerable | 2026-06-08 05:13:57.778869 |
Details available
MEDIUM (5.9)
An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.
Published: 2019-12-03T21:55:47.000Z
Updated: 2024-08-04T19:47:56.616Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5152 |
vulnerable | 2026-06-08 05:13:57.769847 |
Details available
HIGH (7.4)
An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.
Published: 2019-12-18T14:31:56.000Z
Updated: 2024-08-04T19:47:56.594Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.