DirectorySecurity Advisories
Sign In
Security Advisories

CGA-4gf5-63pj-crx3

Published

Last updated

https://images.chainguard.dev/security/CGA-4gf5-63pj-crx3
Package

croc

Latest Update
Fixed
Fixed Version

10.0.0-r0

Aliases
  • CVE-2023-43618
  • GHSA-7mp6-929p-pqhj

Severity

5.3

Medium

CVSS V3

Summary

Croc requires senders to provide local IP addresses in cleartext

Description

An issue was discovered in Croc before 9.6.16. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images