CVE-2023-36325
CVSS 3.1 Score 3.7 of 10 (low)
Details
Published Oct 9, 2024
Updated: Nov 4, 2024
CWE ID 203
Summary
CVE-2023-36325 is a vulnerability affecting i2p version 2.3.0 and below (Java). It allows an attacker to de-anonymize the public IPv4 and IPv6 addresses of i2p hidden services, or eepsites, through a correlation attack. The attack occurs when a tunneled, replayed message exhibits discrepancies in behavior between IPv4 and IPv6 addresses. These discrepancies can result in dropped messages or Wrong Destination responses. An attack would require significant time and effort, taking days to complete.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- I2P