CVE-2017-8823 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point ex...
HighCVSS 8.1
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tor(Debian:12) | < 0.3.1.9-1 | 0.3.1.9-1 |
| debian/tor(Debian:13) | < 0.3.1.9-1 | 0.3.1.9-1 |
| debian/tor(Debian:14) | < 0.3.1.9-1 | 0.3.1.9-1 |
| tor project tor | < 0.2.5.16 | 0.2.5.16 |
| tor project tor | >= 0.2.6, < 0.2.8.17 | 0.2.8.17 |
| tor project tor | >= 0.2.9, < 0.2.9.14 | 0.2.9.14 |
| tor project tor | >= 0.3.0, < 0.3.0.13 | 0.3.0.13 |
| tor project tor | >= 0.3.1, < 0.3.1.9 | 0.3.1.9 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- Debian Security Tracker CVE-2017-8823 vendor-advisory
- blog.torproject.org vendor-advisory
- bugs.torproject.org issue-tracking vendor-advisory
- bugs.torproject.org vendor-advisory
- DSA-4054 third-party-advisory vendor-advisory