An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The
    directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of
    service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that
    is mishandled during voting. (CVE-2018-0490)

  - A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause
    a denial of service (relay crash) because the KIST implementation allows a channel to be added more than
    once in the pending list. (CVE-2018-0491)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The
    directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of
    service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that
    is mishandled during voting. (CVE-2018-0490)

It has been discovered that Tor, a connection-based low-latency anonymous communication system, contains a protocol-list handling bug that could be used to remotely crash directory authorities with a NULL pointer exception (TROVE-2018-001).

This update for tor to version 0.3.2.10 fixes security issues and bugs.

The following vulnerabilities were fixed :

  - CVE-2018-0490: remote crash vulnerability against     directory authorities (boo#1083845, TROVE-2018-001)

  - CVE-2018-0491: remote relay crash (boo#1083846,     TROVE-2018-002)

This new upstream stable version also contains a new system for improved resistance to DoS attacks against relays and various other bug fixes.

ID	Name	Product	Family	Severity
407397	Alpine: multiple tor packages: security update to 0.3.2.10-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407397	Alpine: multiple tor packages: security update to 0.3.2.10-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
407396	Alpine: multiple tor packages: security update to 0.3.1.10-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407396	Alpine: multiple tor packages: security update to 0.3.1.10-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
109412	Debian DSA-4183-1 : tor - security update	Nessus	Debian Local Security Checks	high
107179	openSUSE Security Update : tor (openSUSE-2018-223)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-0490

high

Tenable Plugins

high

high

high

high

high

high