Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Mageia 7: MGASA-2020-0006 Critical: Shadowsocks-libev Denial-of-Service

mageia
Calendar Grey January 5, 2020
Dist Mageia Esm H88
Mageia 2021-0021 enhances nginx to mitigate critical vulnerabilities, including risks of unauthorized access.
Updated shadowsocks-libev packages fix security vulnerabilities: Exploitable denial-of-service vulnerability exists in the UDPRelay functionality (CVE-2019-5163)

Summary

Updated shadowsocks-libev packages fix security vulnerabilities:
Exploitable denial-of-service vulnerability exists in the UDPRelay functionality (CVE-2019-5163).
Code execution vulnerability in the ss-manager binary (CVE-2019-5164).

References

- https://bugs.mageia.org/show_bug.cgi?id=25864

- - https://www.cve.org/CVERecord?id=CVE-2019-5163

- https://www.cve.org/CVERecord?id=CVE-2019-5164

Resolution

SRPMS

- 7/core/shadowsocks-libev-3.3.3-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 05 Jan 2020
URL: https://advisories.mageia.org/MGASA-2020-0006.html
Type: security
CVE: CVE-2019-5163, CVE-2019-5164

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here