Jakob Borg syncthing 输入验证错误漏洞

漏洞信息详情

Jakob Borg syncthing是Jakob Borg开源的一个应用软件。一个连续的文件同步程序。

Syncthing before version 1.15.0 存在安全漏洞，该漏洞源于可能会因发送带有负长度字段的中继消息而崩溃并退出。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/syncthing/syncthing/commit/fb4fdaf4c0a79c22cad000c42ac1394e3ccb6a97

来源:CONFIRM

链接:https://github.com/syncthing/syncthing/security/advisories/GHSA-x462-89pf-6r5h

来源:MISC

链接:https://pkg.go.dev/github.com/syncthing/syncthing

来源:MISC

链接:https://github.com/syncthing/syncthing/commit/fb4fdaf4c0a79c22cad000c42ac1394e3ccb6a97

来源:MISC

链接:https://github.com/syncthing/syncthing/releases/tag/v1.15.0

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-21404

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Syncthing-denial-of-service-35291

暂无