PT-2017-10553 · Tor+1 · Tor+1

Publicado 2017-06-30 · Atualizado 2024-06-15 · CVE-2017-0377

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tor versions 0.3.x before 0.3.0.9

Description The issue is related to the guard-selection algorithm, which only considers the exit relay and not its family. This might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families.

Recommendations For Tor versions 0.3.x before 0.3.0.9, update to version 0.3.0.9 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2017-1794

CVE-2017-0377

OPENSUSE-SU-2024:11469-1

Produtos afetados

Alt Linux

Tor

Referências · 33

• https://github.com/torproject/tor/commit/665baf5ed5c6186d973c46cdea165c0548027350 · Correção
• https://suse.com/security/cve/CVE-2020-10593 · Nota
• https://suse.com/security/cve/CVE-2021-28089 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2017-0377 · Nota
• https://suse.com/security/cve/CVE-2021-28090 · Nota
• https://suse.com/security/cve/CVE-2018-0490 · Nota
• https://suse.com/security/cve/CVE-2017-8819 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0377 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-0376 · Nota
• https://suse.com/security/cve/CVE-2017-0380 · Nota
• https://suse.com/security/cve/CVE-2021-34549 · Nota
• https://suse.com/security/cve/CVE-2017-0375 · Nota
• https://suse.com/security/cve/CVE-2017-0377 · Nota
• https://suse.com/security/cve/CVE-2021-38385 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-0377 · Nota de Segurança