AVG-474 log
Package | shadowsocks-libev |
Status | Fixed |
Severity | High |
Type | arbitrary command execution |
Affected | 3.1.0-2 |
Fixed | 3.1.1-1 |
Current | Removed |
Ticket | None |
Created | Fri Oct 27 18:35:46 2017 |
Issue | Severity | Remote | Type | Description |
---|---|---|---|---|
CVE-2017-15924 | High | No | Arbitrary command execution | In manager.c in ss-manager in shadowsocks-libev before 3.1.1, improper parsing allows command injection via shell metacharacters in a JSON configuration... |
Date | Advisory | Package | Type |
---|---|---|---|
30 Nov 2017 | ASA-201711-40 | shadowsocks-libev | arbitrary command execution |