PT-2021-8850 · Toxcore+1 · Toxcore+1

Kurnevsky · Published 2021-12-13 · Updated 2025-03-01 · CVE-2018-25022

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions toxcore versions prior to 0.2.2

Description The issue allows a remote attacker to discover a target user's IP address by positioning themselves close to the target's Tox Id in the DHT, guessing the target's DHT public key, creating a DHT node with a public key close to it, and finally onion-routing a NAT Ping Request to the target. This is possible because the Onion module in toxcore does not restrict which packets can be onion-routed.

Recommendations For versions prior to 0.2.2, update to version 0.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Onion module until a patch is available. Avoid using the Onion module for sensitive communications until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2025-3455

CVE-2018-25022

Affected Products

Alt Linux

Toxcore

References · 12

• 🔥 https://github.com/TokTok/c-toxcore/issues/873 · Exploit
• 🔥 https://blog.tox.chat/2018/04/security-vulnerability-and-new-toxcore-release · Exploit
• https://github.com/TokTok/c-toxcore/pull/872 · Patch
• https://ubuntu.com/security/CVE-2018-25022 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-25022 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-25022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-25022 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-25022 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-25022 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-25022 · Vendor Advisory
• https://t.me/cvenotify/24560 · Telegram Post
• https://t.me/cibsecurity/33790 · Telegram Post