croc

4 results · Clear filters · Feed

• Medium 5.3
  CVE-2023-43617

  Cros secrets may be disclosed to untrusted relay

  An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name.

  github.com/schollz/croc github.com/schollz/croc/v8 github.com/schollz/croc/v9 github.com/schollz/croc/v6 Alpine Go
  Sep 20, 2023
• Medium 5.5
  CVE-2023-43616

  Sender can cause a receiver to overwrite files during ZIP extraction in Croc

  An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.

  github.com/schollz/croc github.com/schollz/croc/v8 github.com/schollz/croc/v9 github.com/schollz/croc/v6 Alpine Go
  Sep 20, 2023
• Medium 4.7
  CVE-2023-43621

  Croc may expose secret to local users

  An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments.

  github.com/schollz/croc github.com/schollz/croc/v8 github.com/schollz/croc/v9 github.com/schollz/croc/v6 Alpine Go
  Sep 20, 2023
• Medium 5.3
  CVE-2023-43618

  Croc requires senders to provide local IP addresses in cleartext

  An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message.

  github.com/schollz/croc github.com/schollz/croc/v8 github.com/schollz/croc/v9 github.com/schollz/croc/v6 Alpine Go
  Sep 20, 2023