CVE-2023-36325
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.
| Vendor | n/a |
| Product | n/a |
| Published | Oct 9, 2024 |
| Last Updated | Nov 4, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new low vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a