CVE-2017-8819 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion s...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tor(Debian:12) | < 0.3.1.9-1 | 0.3.1.9-1 |
| debian/tor(Debian:13) | < 0.3.1.9-1 | 0.3.1.9-1 |
| debian/tor(Debian:14) | < 0.3.1.9-1 | 0.3.1.9-1 |
| tor project tor | < 0.2.5.16 | 0.2.5.16 |
| tor project tor | >= 0.2.6, < 0.2.8.17 | 0.2.8.17 |
| tor project tor | >= 0.2.9, < 0.2.9.14 | 0.2.9.14 |
| tor project tor | >= 0.3.0, < 0.3.0.13 | 0.3.0.13 |
| tor project tor | >= 0.3.1, < 0.3.1.9 | 0.3.1.9 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- Debian Security Tracker CVE-2017-8819 vendor-advisory
- blog.torproject.org vendor-advisory
- bugs.torproject.org vendor-advisory
- DSA-4054 third-party-advisory vendor-advisory