CVE-2023-36325
Oct. 10, 2024, 12:51 p.m.
Tags
Product(s) Impacted
I2P
- before 2.3.0
Description
i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.
Weaknesses
Date
Published: Oct. 9, 2024, 6:15 a.m.
Last Modified: Oct. 10, 2024, 12:51 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org