We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.
Reserved 2023-06-21 | Published 2024-10-09 | Updated 2024-11-04 | Assigner mitrexeiaso.net/blog/CVE-2023-36325
geti2p.net/en/blog/post/2023/06/25/new_release_2.3.0
i2pgit.org/...ommit/82aa4e19fbb37ca1bd752ec1b836120beec0985f
Support options
