Improper authentication in the SOCKS inbound

Critical

nekohasekai published GHSA-r5hm-mp3j-285g

Sep 25, 2023

Package

github.com/sagernet/sing-box (Go)

Affected versions

< 1.5.0-rc.5

Patched versions

1.4.5

Description

Impact

This vulnerability allows specially crafted requests to bypass authentication, affecting all SOCKS inbounds with user authentication.

Patches

Update to sing-box 1.4.5 or 1.5.0-rc.5 and later versions.

Workarounds

Don't expose the SOCKS5 inbound to insecure environments.

Severity

Critical

9.1

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H