CVE-2017-8823

Published Dec 3, 2017

Last updated 25 days ago

CVSS high 8.1

Overview

Description: In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013.
Source: security@debian.org
NVD status: Deferred

Risk scores

CVSS 3.0

Type: Primary
Base score: 8.1
Impact score: 5.9
Exploitability score: 2.2
Vector string: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "067DE048-F786-4E63-98E6-6FD6415DD3A5",
            "versionEndExcluding": "0.2.5.16"
          },
          {
            "criteria": "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5372249B-59F8-4866-B4D3-F52980FCC269",
            "versionEndExcluding": "0.2.8.17",
            "versionStartIncluding": "0.2.6"
          },
          {
            "criteria": "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E0739CCD-DE8F-4A44-91CD-986C4644045F",
            "versionEndExcluding": "0.2.9.14",
            "versionStartIncluding": "0.2.9"
          },
          {
            "criteria": "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E623D0FC-453C-4D7A-8328-C4C252EEC976",
            "versionEndExcluding": "0.3.0.13",
            "versionStartIncluding": "0.3.0"
          },
          {
            "criteria": "cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "249879F0-6A12-41C2-9559-020021080696",
            "versionEndExcluding": "0.3.1.9",
            "versionStartIncluding": "0.3.1"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
          },
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References