PT-2017-10552 · Tor+1 · Tor+1

Armadev + 1 · Publicado 2017-06-08 · Atualizado 2024-06-15 · CVE-2017-0376

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.3.0.8

Description The issue allows for a denial of service, causing an assertion failure and daemon exit in the connection edge process relay cell function. This occurs when a BEGIN DIR cell is sent on a rendezvous circuit.

Recommendations For versions prior to 0.3.0.8, update to version 0.3.0.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the connection edge process relay cell function to minimize the risk of exploitation.

Correção

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

ALT-PU-2017-1700

CVE-2017-0376

DLA-982-1

DSA-3877-1

MGASA-2017-0176

OPENSUSE-SU-2024:11469-1

Produtos afetados

Alt Linux

Tor

Referências · 47

• https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd · Correção
• https://suse.com/security/cve/CVE-2017-0377 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0176 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-8820 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0375 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-0380 · Nota
• https://ubuntu.com/security/CVE-2017-0376 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-0376 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-0375 · Nota
• https://osv.dev/vulnerability/DSA-3877-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-8821 · Nota
• https://suse.com/security/cve/CVE-2016-1254 · Nota
• https://security-tracker.debian.org/tracker/source-package/tor · Aviso do Fabricante
• https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html · Nota
• https://suse.com/security/cve/CVE-2020-10592 · Nota