CVE-2017-8822 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick the...
LowCVSS 3.7
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tor(Debian:12) | < 0.3.1.9-1 | 0.3.1.9-1 |
| debian/tor(Debian:13) | < 0.3.1.9-1 | 0.3.1.9-1 |
| debian/tor(Debian:14) | < 0.3.1.9-1 | 0.3.1.9-1 |
| tor project tor | < 0.2.5.16 | 0.2.5.16 |
| tor project tor | >= 0.2.6, < 0.2.8.17 | 0.2.8.17 |
| tor project tor | >= 0.2.9, < 0.2.9.14 | 0.2.9.14 |
| tor project tor | >= 0.3.0, < 0.3.0.13 | 0.3.0.13 |
| tor project tor | >= 0.3.1, < 0.3.1.9 | 0.3.1.9 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- Debian Security Tracker CVE-2017-8822 vendor-advisory
- blog.torproject.org vendor-advisory
- bugs.torproject.org issue-tracking vendor-advisory
- bugs.torproject.org vendor-advisory
- DSA-4054 third-party-advisory vendor-advisory