CVE-2019-5163

Name of the Vulnerable Software and Affected Versions Shadowsocks-libev version 3.3.2

Description A denial-of-service issue exists in the UDPRelay functionality. When using a Stream Cipher and a local address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this issue.

Recommendations For Shadowsocks-libev version 3.3.2, consider disabling the UDPRelay functionality as a temporary workaround until a patch is available. Restrict access to the local address to minimize the risk of exploitation.