~/products/github.com/sagernet_sing

pipeline liveDigest Docs

Github.Com Sagernet Sing vulnerabilities

1 known vulnerability affecting github.com/sagernet_sing.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2023-43644P2CRITICAL≥ 0, < 0.2.12-0.20230925092853-5b05b5c147d92023-09-26

CVE-2023-43644 [CRITICAL] CWE-306 sing-box vulnerable to improper authentication in the SOCKS inbound sing-box vulnerable to improper authentication in the SOCKS inbound ### Impact This vulnerability allows specially crafted requests to bypass authentication, affecting all SOCKS inbounds with user authentication. ### Patches Update to sing-box 1.4.5 or 1.5.0-rc.5 and later versions. ### Workarounds Don't expose the SOCKS5 inbound to insecure environments.

Github.Com Sagernet Sing vulnerabilities | cvebase