CVE-2023-43644

3 advisories.

Go/github.com/sagernet/sing-box CVE-2023-43644: critical 9.1, EPSS 0.82%

sing-box vulnerable to improper authentication in the SOCKS inbound

Action: Upgrade github.com/sagernet/sing-box to 1.4.5 or later.

go get github.com/sagernet/sing-box@v1.4.5

go get github.com/sagernet/sing-box@v1.5.0-rc.5

introduced	fixed	last affected
0	1.4.5	-
1.5.0-beta.1	1.5.0-rc.5	-

1.4.5

1.5.0-rc.5

CVE-2023-43644 · published 2023-09-26T19:35:39Z · modified 2026-09-10T03:50:03.205884551Z · JSON

sing-box vulnerable to improper authentication in the SOCKS inbound

Action: Upgrade github.com/sagernet/sing to 0.2.12-0.20230925092853-5b05b5c147d9 or later.

go get github.com/sagernet/sing@v0.2.12-0.20230925092853-5b05b5c147d9

introduced	fixed	last affected
0	0.2.12-0.20230925092853-5b05b5c147d9	-

0.2.12-0.20230925092853-5b05b5c147d9

CVE-2023-43644 · published 2023-09-26T19:35:39Z · modified 2026-09-10T03:50:03.205884551Z · JSON

Authentication bypass in github.com/sagernet/sing

Action: Upgrade github.com/sagernet/sing to 0.2.12-0.20230925092853-5b05b5c147d9 or later.

go get github.com/sagernet/sing@v0.2.12-0.20230925092853-5b05b5c147d9

introduced	fixed	last affected
0	0.2.12-0.20230925092853-5b05b5c147d9	-

0.2.12-0.20230925092853-5b05b5c147d9

CVE-2023-43644 · published 2023-10-02T18:39:20Z · modified 2024-05-20T16:03:47Z · JSON