Strix
26.1K

CVE-2017-15924

UnknownEPSS 1.27%

Last modified

CVE-2017-15924 is a vulnerability of currently unknown severity. In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.. EPSS estimates a 1.27% chance of exploitation in the next 30 days.

Description

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.

Metrics

EPSS Probability
1.27%

66.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
ShadowsocksShadowsocks-Libev1.3
ShadowsocksShadowsocks-Libev1.3.2
ShadowsocksShadowsocks-Libev1.4.0
ShadowsocksShadowsocks-Libev1.4.1
ShadowsocksShadowsocks-Libev1.4.2
ShadowsocksShadowsocks-Libev1.4.3
ShadowsocksShadowsocks-Libev1.4.4
ShadowsocksShadowsocks-Libev1.4.5
ShadowsocksShadowsocks-Libev1.4.6
ShadowsocksShadowsocks-Libev1.4.7
ShadowsocksShadowsocks-Libev1.4.8
ShadowsocksShadowsocks-Libev1.5.0
ShadowsocksShadowsocks-Libev1.5.1
ShadowsocksShadowsocks-Libev1.5.2
ShadowsocksShadowsocks-Libev1.5.3
ShadowsocksShadowsocks-Libev1.6.1
ShadowsocksShadowsocks-Libev1.6.2
ShadowsocksShadowsocks-Libev1.6.3
ShadowsocksShadowsocks-Libev1.6.4
ShadowsocksShadowsocks-Libev2.0.1
ShadowsocksShadowsocks-Libev2.0.2
ShadowsocksShadowsocks-Libev2.0.3
ShadowsocksShadowsocks-Libev2.0.4
ShadowsocksShadowsocks-Libev2.0.5
ShadowsocksShadowsocks-Libev2.0.6
ShadowsocksShadowsocks-Libev2.0.7
ShadowsocksShadowsocks-Libev2.0.8
ShadowsocksShadowsocks-Libev2.1.0
ShadowsocksShadowsocks-Libev2.1.1
ShadowsocksShadowsocks-Libev2.1.2
ShadowsocksShadowsocks-Libev2.1.3
ShadowsocksShadowsocks-Libev2.1.4
ShadowsocksShadowsocks-Libev2.2.0
ShadowsocksShadowsocks-Libev2.2.1
ShadowsocksShadowsocks-Libev2.2.2
ShadowsocksShadowsocks-Libev2.2.3
ShadowsocksShadowsocks-Libev2.3.0
ShadowsocksShadowsocks-Libev2.3.1
ShadowsocksShadowsocks-Libev2.3.2
ShadowsocksShadowsocks-Libev2.3.3
ShadowsocksShadowsocks-Libev2.4.0
ShadowsocksShadowsocks-Libev2.4.1
ShadowsocksShadowsocks-Libev2.4.2
ShadowsocksShadowsocks-Libev2.4.3
ShadowsocksShadowsocks-Libev2.4.4
ShadowsocksShadowsocks-Libev2.4.5
ShadowsocksShadowsocks-Libev2.4.6
ShadowsocksShadowsocks-Libev2.4.7
ShadowsocksShadowsocks-Libev2.4.8
ShadowsocksShadowsocks-Libev2.5.0

Showing 50 of 71 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-15924?
In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.
How severe is CVE-2017-15924?
Severity scoring for CVE-2017-15924 is pending analysis. The EPSS model estimates a 1.27% probability of exploitation in the next 30 days.
How do I fix CVE-2017-15924?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-15924?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST