PT-2022-15039 · Unknown · Onionshare

Micahflee · Published 2022-01-18 · Updated 2024-06-15 · CVE-2022-21688

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.5

Description OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing. Roughly 20 bytes lead to 2GB memory consumption and this can be triggered multiple times. To be abused, this vulnerability requires rendering in the history tab, so some user interaction is required. An adversary with knowledge of the Onion service address in public mode or with authentication in private mode can perform a Denial of Service attack, which quickly results in out-of-memory for the server.

Recommendations Update to version 2.5 to resolve the issue. As a temporary workaround, consider disabling the rendering of images in the history tab until a patch is available. Monitor for upstream fix and apply it when available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-21688

GHSA-X7WR-283H-5H2V

OPENSUSE-SU-2024:11983-1

OPENSUSE-SU-2024:13635-1

PYSEC-2022-39

Affected Products

Onionshare

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21688.json · Exploit
• https://osv.dev/vulnerability/PYSEC-2022-39 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21688 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21688 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:13635-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21688 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-21688 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-21688 · Security Note
• https://osv.dev/vulnerability/GHSA-x7wr-283h-5h2v · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11983-1 · Vendor Advisory
• https://github.com/onionshare/onionshare/releases/tag/v2.5 · Note
• https://github.com/onionshare/onionshare · Note
• https://github.com/onionshare/onionshare/security/advisories/GHSA-x7wr-283h-5h2v · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-39.yaml · Note
• https://suse.com/security/cve/CVE-2022-21688 · Note