v2ray-core vulnerabilities (openSUSE)
11 vulnerabilities.
-
v2ray-coreopenSUSE gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
v2ray-coreopenSUSE gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
v2ray-coreopenSUSE gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 6.3 Medium -
v2ray-coreopenSUSE go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header 6.9 Medium -
v2ray-coreopenSUSE go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware 6.9 Medium -
v2ray-coreopenSUSE go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For 6.9 Medium -
v2ray-coreopenSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
v2ray-coreopenSUSE uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch 2.3 Low -
v2ray-coreopenSUSE Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
v2ray-coreopenSUSE golang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA media No score -
v2ray-coreopenSUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical