CVE:CVE-2019-5163
CNNVD:CNNVD-201912-152
Shadowsocks-libev是一款用于嵌入式设备的轻型安全SOCKS5代理。
Shadowsocks-libev 3.3.2版本中的UDPRelay功能存在访问控制错误漏洞。攻击者可通过发送任意UDP数据包利用该漏洞造成拒绝服务。
solution:Upgrade shadowsocks shadowsocks-libev to a higher version than 3.3.2,and avoid the version 3.3.2; Upgrade opensuse backports to a higher version than sle-15:sp1,and avoid the version sle-15:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1