Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunnel packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading sensitive router memory, aka the GarlicRust bug.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
i2pd和kovri 安全漏洞
Vulnerability Description
i2p是一个用于加密的网络协议，能够实现匿名访问互联网。i2pd是i2p客户端的C++实现。kovri是一个轻量级的兼容i2p的路由器。 i2pd 2.17之前的版本和kovri pre-alpha版本中存在安全漏洞，该漏洞源于程序没有正确的处理arlic DeliveryTypeTunnel数据包。远程攻击者可借助特制的数据包利用该漏洞从进程内存中获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A