Vulnerability · Published Sep 25, 2023 · Assigned by GitHub_M
CVE-2023-43644Improper authentication in the SOCKS5 inbound in sing-box
Critical 9.1
In plain English
A critical-severity missing authentication in sing-box from SagerNet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to sing-box 1.4.4 or to 1.5.0-rc.4. Users unable to update should not expose the SOCKS5 inbound to insecure environments.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/sagernet/sing | 0.2.12-0.20230925092853-5b05b5c147d9 | GHSA-r5hm-mp3j-285g |
| Go | github.com/sagernet/sing | 0.2.12-0.20230925092853-5b05b5c147d9 | GO-2023-2077 |
| Go | github.com/sagernet/sing-box | 1.4.5 | GHSA-r5hm-mp3j-285g |
| Go | github.com/sagernet/sing-box | 1.5.0-rc.5 | GHSA-r5hm-mp3j-285g |
Affected products (as reported)
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References
- https://github.com/SagerNet/sing-box/security/advisories/GHSA-r5hm-mp3j-285g x_refsource_CONFIRM