High
Security advisory
In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-15924
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:12 UTC · Revision 1
Source evidence
In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.
osv:CVE-2017-15924
Complete source record
{
"id": "0974a2dbde3bcff6285a11f1383615e8785e60fc239724e26960b7aae0bb1521",
"url": "https://osv.dev/vulnerability/CVE-2017-15924",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-15924",
"summary": "In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.",
"evidence": "osv:CVE-2017-15924",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-15924",
"aliases": [
"CVE-2017-15924"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/shadowsocks/shadowsocks-c",
"type": "GIT",
"events": [
{
"introduced": "5b7f057663898b91e174b9440864f51474cc780d"
},
{
"last_affected": "69c41d9752fe37580ba1d6b9b3023aff28655f07"
},
{
"fixed": "c67d275803dc6ea22c558d06b1f7ba9f94cd8de3"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.3"
},
{
"last_affected": "1.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.3.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.3.2"
},
{
"last_affected": "1.3.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.0"
},
{
"last_affected": "1.4.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.1"
},
{
"last_affected": "1.4.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.2"
},
{
"last_affected": "1.4.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.3"
},
{
"last_affected": "1.4.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.4"
},
{
"last_affected": "1.4.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.5"
},
{
"last_affected": "1.4.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.6"
},
{
"last_affected": "1.4.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.7"
},
{
"last_affected": "1.4.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.4.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.8"
},
{
"last_affected": "1.4.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.0"
},
{
"last_affected": "1.5.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.1"
},
{
"last_affected": "1.5.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.2"
},
{
"last_affected": "1.5.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.5.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.3"
},
{
"last_affected": "1.5.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.6.1"
},
{
"last_affected": "1.6.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.6.2"
},
{
"last_affected": "1.6.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.6.3"
},
{
"last_affected": "1.6.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:1.6.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.6.4"
},
{
"last_affected": "1.6.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.1"
},
{
"last_affected": "2.0.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.2"
},
{
"last_affected": "2.0.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.3"
},
{
"last_affected": "2.0.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.4"
},
{
"last_affected": "2.0.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.5"
},
{
"last_affected": "2.0.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.6"
},
{
"last_affected": "2.0.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.7"
},
{
"last_affected": "2.0.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.0.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.8"
},
{
"last_affected": "2.0.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.0"
},
{
"last_affected": "2.1.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.1"
},
{
"last_affected": "2.1.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.2"
},
{
"last_affected": "2.1.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.3"
},
{
"last_affected": "2.1.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.1.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.4"
},
{
"last_affected": "2.1.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2.0"
},
{
"last_affected": "2.2.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2.1"
},
{
"last_affected": "2.2.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2.2"
},
{
"last_affected": "2.2.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.2.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.2.3"
},
{
"last_affected": "2.2.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.3.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.3.1"
},
{
"last_affected": "2.3.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.3.2"
},
{
"last_affected": "2.3.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.3.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.3.3"
},
{
"last_affected": "2.3.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.0"
},
{
"last_affected": "2.4.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.1"
},
{
"last_affected": "2.4.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.2"
},
{
"last_affected": "2.4.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.3"
},
{
"last_affected": "2.4.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.4"
},
{
"last_affected": "2.4.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.5"
},
{
"last_affected": "2.4.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.6"
},
{
"last_affected": "2.4.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.7"
},
{
"last_affected": "2.4.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.4.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.8"
},
{
"last_affected": "2.4.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5.0"
},
{
"last_affected": "2.5.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5.1"
},
{
"last_affected": "2.5.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5.2"
},
{
"last_affected": "2.5.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5.3"
},
{
"last_affected": "2.5.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5.4"
},
{
"last_affected": "2.5.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5.5"
},
{
"last_affected": "2.5.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.5.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.5.6"
},
{
"last_affected": "2.5.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.6.0"
},
{
"last_affected": "2.6.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.6.1"
},
{
"last_affected": "2.6.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.6.2"
},
{
"last_affected": "2.6.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:2.6.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.6.3"
},
{
"last_affected": "2.6.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.0"
},
{
"last_affected": "3.0.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.1"
},
{
"last_affected": "3.0.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.2"
},
{
"last_affected": "3.0.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.3"
},
{
"last_affected": "3.0.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.4"
},
{
"last_affected": "3.0.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.5"
},
{
"last_affected": "3.0.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.6"
},
{
"last_affected": "3.0.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.7"
},
{
"last_affected": "3.0.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.0.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.8"
},
{
"last_affected": "3.0.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:shadowsocks:shadowsocks-libev:3.1.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.1.0"
},
{
"last_affected": "3.1.0"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "c67d275803dc6ea22c558d06b1f7ba9f94cd8de3"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"1.3",
"1.3.2",
"1.4.0",
"1.4.1",
"1.4.2",
"1.4.3",
"1.4.4",
"1.4.5",
"1.4.6",
"1.4.7",
"1.4.8",
"1.5.0",
"1.5.1",
"1.5.2",
"1.5.3",
"1.6.1",
"1.6.2",
"1.6.3",
"1.6.4",
"2.0.1",
"2.0.2",
"2.0.3",
"2.0.4",
"2.0.5",
"2.0.6",
"2.0.7",
"2.0.8",
"2.1.0",
"2.1.1",
"2.1.2",
"2.1.3",
"2.1.4",
"2.2.0",
"2.2.1",
"2.2.2",
"2.2.3",
"2.3.0",
"2.3.1",
"2.3.2",
"2.3.3",
"2.4.0",
"2.4.1",
"2.4.2",
"2.4.3",
"2.4.4",
"2.4.5",
"2.4.6",
"2.4.7",
"2.4.8",
"2.5.0",
"2.5.1",
"2.5.2",
"2.5.3",
"2.5.4",
"2.5.5",
"2.5.6",
"2.6.0",
"2.6.1",
"2.6.2",
"2.6.3",
"3.0.0",
"3.0.1",
"3.0.2",
"3.0.3",
"3.0.4",
"3.0.5",
"3.0.6",
"3.0.7",
"3.0.8",
"3.1.0",
"v3.1.0",
"v3.0.8",
"v3.0.7",
"v3.0.6",
"v3.0.5",
"v3.0.4",
"v3.0.3",
"v3.0.2",
"v3.0.1",
"v3.0.0",
"v2.6.3",
"v2.6.2",
"v2.6.1",
"v2.6.0",
"v2.5.6",
"v2.5.5",
"v2.5.4",
"v2.5.3",
"v2.5.2",
"v2.5.1",
"v2.5.0",
"v2.4.8",
"v2.4.7",
"v2.4.6",
"v2.4.5",
"v2.4.4",
"v2.4.3",
"v2.4.2",
"v2.4.1",
"v2.4.0",
"v2.3.3",
"v2.3.2",
"v2.3.1",
"v2.3.0",
"v2.2.3",
"v2.2.2",
"v2.2.0",
"v2.1.4",
"v2.1.3",
"v2.1.2",
"v1.6.2",
"v2.1.1",
"v2.1.0",
"v2.0.8",
"v2.0.7",
"v2.0.6",
"v2.0.5",
"v2.0.4",
"v2.0.3",
"v2.0.2",
"v2.0.1",
"v1.6.4",
"v1.6.3",
"v1.6.1",
"v1.5.3",
"v1.5.2",
"v1.5.1",
"v1.5.0",
"v1.4.8",
"v1.4.7",
"v1.4.6",
"v1.4.5",
"v1.4.4",
"v1.4.3",
"v1.4.2",
"v1.4.1",
"v1.4.0",
"v1.3.2",
"v1.3"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15924.json",
"vanir_signatures": [
{
"id": "CVE-2017-15924-5639677e",
"digest": {
"length": 2671,
"function_hash": "51715648287725508804296421552476954729"
},
"source": "https://github.com/shadowsocks/shadowsocks-c/commit/c67d275803dc6ea22c558d06b1f7ba9f94cd8de3",
"target": {
"file": "src/manager.c",
"function": "construct_command_line"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2017-15924-5c1da198",
"digest": {
"threshold": 0.9,
"line_hashes": [
"169837448405245710347467634324323478422",
"327659273079150167083867326886170459882",
"301484648099712372651071308334292968805",
"81374173212013676119655546543043961364",
"40156762308119617865492505593162385531",
"189886026585957659222601073739168781841",
"65991846492554056196821736162134505460",
"212907375527110548919205828182184045444",
"266748927104649670767550455357153502823",
"2561586973442348593906185680394902824",
"73857112924478152416306249729309578487",
"10983231780701925607823863281532833026",
"57259832225120913902268720118809065672",
"126842709979597372642403940724571959268",
"42157759316307733695178137402041078878",
"145036398007120937366813029069073129853",
"224591225731331742064323684188427633094",
"32278634827548368364613609433937393828",
"2653600847363017017969292359007098289",
"26085178480316581020662140927533394189",
"282584403883317560828349507996565172350",
"102608600048312645466792487933083938846",
"28508456101964790122671434748187555180",
"97940369526720310290924854467897825220"
]
},
"source": "https://github.com/shadowsocks/shadowsocks-c/commit/c67d275803dc6ea22c558d06b1f7ba9f94cd8de3",
"target": {
"file": "src/manager.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2017-15924-7e24474d",
"digest": {
"length": 1080,
"function_hash": "277076487168416077177268514653106974475"
},
"source": "https://github.com/shadowsocks/shadowsocks-c/commit/c67d275803dc6ea22c558d06b1f7ba9f94cd8de3",
"target": {
"file": "src/manager.c",
"function": "build_config"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:21:16Z"
}
}
],
"modified": "2026-10-20T13:21:16.317923979Z",
"provider": "osv",
"references": [
"https://github.com/shadowsocks/shadowsocks-libev/commit/c67d275803dc6ea22c558d06b1f7ba9f94cd8de3",
"https://github.com/shadowsocks/shadowsocks-libev/issues/1734",
"https://www.x41-dsec.de/lab/advisories/x41-2017-010-shadowsocks-libev/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:9.2:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.2"
},
{
"last_affected": "9.2"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-15924",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387554,
"published_at": "2017-10-27T16:29:00.223+00:00"
}