CVE:CVE-2019-5164
CNNVD:CNNVD-201912-153
Shadowsocks-libev是一款用于嵌入式设备的轻型安全SOCKS5代理。
Shadowsocks-libev 3.3.2版本中的ss-manager二进制文件存在访问控制错误漏洞。攻击者可通过发送特制网络数据包到ss-manager利用该漏洞运行任意二进制文件，进而执行代码和提升权限。
solution:Upgrade shadowsocks shadowsocks-libev to a higher version than 3.3.2,and avoid the version 3.3.2; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1