An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message. https://www.openwall.com/lists/oss-security/2023/09/08/2 https://github.com/schollz/croc/issues/597
Created golang-github-schollz-croc tracking bugs for this issue: Affects: fedora-all [bug 2240120]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.