CVE-2017-15924 In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to...
HighCVSS 7.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/shadowsocks-libev(Debian:12) | < 3.1.0+ds-2 | 3.1.0+ds-2 |
| debian/shadowsocks-libev(Debian:13) | < 3.1.0+ds-2 | 3.1.0+ds-2 |
| shadowsocks-libev | = 1.3 | No fix listed |
| shadowsocks-libev | = 1.3.2 | No fix listed |
| shadowsocks-libev | = 1.4.0 | No fix listed |
| shadowsocks-libev | = 1.4.1 | No fix listed |
| shadowsocks-libev | = 1.4.2 | No fix listed |
| shadowsocks-libev | = 1.4.3 | No fix listed |
| shadowsocks-libev | = 1.4.4 | No fix listed |
| shadowsocks-libev | = 1.4.5 | No fix listed |
| shadowsocks-libev | = 1.4.6 | No fix listed |
| shadowsocks-libev | = 1.4.7 | No fix listed |
| shadowsocks-libev | = 1.4.8 | No fix listed |
| shadowsocks-libev | = 1.5.0 | No fix listed |
| shadowsocks-libev | = 1.5.1 | No fix listed |
| shadowsocks-libev | = 1.5.2 | No fix listed |
| shadowsocks-libev | = 1.5.3 | No fix listed |
| shadowsocks-libev | = 1.6.1 | No fix listed |
| shadowsocks-libev | = 1.6.2 | No fix listed |
| shadowsocks-libev | = 1.6.3 | No fix listed |
| shadowsocks-libev | = 1.6.4 | No fix listed |
| shadowsocks-libev | = 2.0.1 | No fix listed |
| shadowsocks-libev | = 2.0.2 | No fix listed |
| shadowsocks-libev | = 2.0.3 | No fix listed |
| shadowsocks-libev | = 2.0.4 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| shadowsocks-libev | = 2.0.5 | No fix listed |
| shadowsocks-libev | = 2.0.6 | No fix listed |
| shadowsocks-libev | = 2.0.7 | No fix listed |
| shadowsocks-libev | = 2.0.8 | No fix listed |
| shadowsocks-libev | = 2.1.0 | No fix listed |
| shadowsocks-libev | = 2.1.1 | No fix listed |
| shadowsocks-libev | = 2.1.2 | No fix listed |
| shadowsocks-libev | = 2.1.3 | No fix listed |
| shadowsocks-libev | = 2.1.4 | No fix listed |
| shadowsocks-libev | = 2.2.0 | No fix listed |
| shadowsocks-libev | = 2.2.1 | No fix listed |
| shadowsocks-libev | = 2.2.2 | No fix listed |
| shadowsocks-libev | = 2.2.3 | No fix listed |
| shadowsocks-libev | = 2.3.0 | No fix listed |
| shadowsocks-libev | = 2.3.1 | No fix listed |
| shadowsocks-libev | = 2.3.2 | No fix listed |
| shadowsocks-libev | = 2.3.3 | No fix listed |
| shadowsocks-libev | = 2.4.0 | No fix listed |
| shadowsocks-libev | = 2.4.1 | No fix listed |
| shadowsocks-libev | = 2.4.2 | No fix listed |
| shadowsocks-libev | = 2.4.3 | No fix listed |
| shadowsocks-libev | = 2.4.4 | No fix listed |
| shadowsocks-libev | = 2.4.5 | No fix listed |
| shadowsocks-libev | = 2.4.6 | No fix listed |
| shadowsocks-libev | = 2.4.7 | No fix listed |
| shadowsocks-libev | = 2.4.8 | No fix listed |
| shadowsocks-libev | = 2.5.0 | No fix listed |
| shadowsocks-libev | = 2.5.1 | No fix listed |
| shadowsocks-libev | = 2.5.2 | No fix listed |
| shadowsocks-libev | = 2.5.3 | No fix listed |
| shadowsocks-libev | = 2.5.4 | No fix listed |
| shadowsocks-libev | = 2.5.5 | No fix listed |
| shadowsocks-libev | = 2.5.6 | No fix listed |
| shadowsocks-libev | = 2.6.0 | No fix listed |
| shadowsocks-libev | = 2.6.1 | No fix listed |
| shadowsocks-libev | = 2.6.2 | No fix listed |
| shadowsocks-libev | = 2.6.3 | No fix listed |
| shadowsocks-libev | = 3.0.0 | No fix listed |
| shadowsocks-libev | = 3.0.1 | No fix listed |
| shadowsocks-libev | = 3.0.2 | No fix listed |
| shadowsocks-libev | = 3.0.3 | No fix listed |
| shadowsocks-libev | = 3.0.4 | No fix listed |
| shadowsocks-libev | = 3.0.5 | No fix listed |
| shadowsocks-libev | = 3.0.6 | No fix listed |
| shadowsocks-libev | = 3.0.7 | No fix listed |
| shadowsocks-libev | = 3.0.8 | No fix listed |
| shadowsocks-libev | = 3.1.0 | No fix listed |
| debian linux | = 9.2 | No fix listed |
References
- Debian Security Tracker CVE-2017-15924 vendor-advisory
- openwall.com mailing-list third-party-advisory
- DSA-4009 third-party-advisory vendor-advisory
- github.com third-party-advisory
- github.com third-party-advisory
- www.x41-dsec.de exploit third-party-advisory