CVE-2019-5164 Command injection in Shadowsocks

What is CVE-2019-5164?

CVE-2019-5164 is a high-severity command injection vulnerability in Opensuse Backports Sle, published on 3 Dec 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger this vulnerability.

Weakness: CWE-306

Which versions are affected by CVE-2019-5164?

It affects 3 products.

Products include Opensuse Backports Sle, Opensuse Leap, Shadowsocks Shadowsocks-Libev.

How do I fix CVE-2019-5164?

Upgrade to a fixed version.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2019-5164 being exploited?

There is no known exploitation of CVE-2019-5164 in the wild and no public exploit code.

Other vulnerabilities in Opensuse Backports Sle

• CVE-2020-12641 Roundcube Webmail Remote Code Execution Exploited Critical 9.8
• CVE-2020-12640 Path traversal in n/a Critical 9.8
• CVE-2020-8233 Command injection in EdgeSwitch firmware v1.9.0 and prior High 8.8
• CVE-2020-8026 inn: non-root owned files High 8.4
• CVE-2020-15229 Path traversal and files overwrite with unsquashfs High 8.2

All Opensuse Backports Sle vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2019-5164, GHSA-rcm9-p88f-cmqm, UBUNTU-CVE-2019-5164.