CVE-2021-4070: Off-by-one Error in v2fly/v2ray-core

February 24, 2022 (updated February 26, 2022)

Off-by-one Error in GitHub repository v2fly/v2ray-core prior to 4.44.0.

References

github.com/advisories/GHSA-4cxw-hq44-r344
github.com/v2fly/v2ray-core/commit/c1af2bfd7aa59a4482aa7f6ec4b9208c1d350b5c
huntr.dev/bounties/8da19456-4d89-41ef-9781-a41efd6a1877
nvd.nist.gov/vuln/detail/CVE-2021-4070

Code Behaviors & Features

Detect and mitigate CVE-2021-4070 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →