Croc
by Schollz
Source repositories
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-43620 | Hig | 0.44 | 7.8 | 0.00 | Sep 20, 2023 | An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver. | ||
| CVE-2023-43619 | Hig | 0.44 | 7.8 | 0.00 | Sep 20, 2023 | An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file. | ||
| CVE-2023-43616 | Med | 0.29 | 5.5 | 0.00 | Sep 20, 2023 | An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction. | ||
| CVE-2023-43617 | Med | 0.28 | 5.3 | 0.01 | Sep 20, 2023 | An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name. | ||
| CVE-2023-43618 | Med | 0.27 | 5.3 | 0.00 | Sep 20, 2023 | An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message. | ||
| CVE-2023-43621 | Med | 0.24 | 4.7 | 0.00 | Sep 20, 2023 | An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments. |
- risk 0.44cvss 7.8epss 0.00
An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver.
- risk 0.44cvss 7.8epss 0.00
An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file.
- risk 0.29cvss 5.5epss 0.00
An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.
- risk 0.28cvss 5.3epss 0.01
An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name.
- risk 0.27cvss 5.3epss 0.00
An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message.
- risk 0.24cvss 4.7epss 0.00
An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments.