OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing. Roughly 20 bytes lead to 2GB memory consumption and this can be triggered multiple times. To be abused, this vulnerability requires rendering in the history tab, so some user interaction is required. An adversary with knowledge of the Onion service address in public mode or with authentication in private mode can perform a Denial of Service attack, which quickly results in out-of-memory for the server. This requires the desktop application with rendered history, therefore the impact is only elevated. This issue has been patched in version 2.5.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and     chat with friends using the Tor network. Affected versions of the desktop application were found to be     vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing. Roughly 20 bytes     lead to 2GB memory consumption and this can be triggered multiple times. To be abused, this vulnerability     requires rendering in the history tab, so some user interaction is required. An adversary with knowledge     of the Onion service address in public mode or with authentication in private mode can perform a Denial of     Service attack, which quickly results in out-of-memory for the server. This requires the desktop     application with rendered history, therefore the impact is only elevated. This issue has been patched in     version 2.5. (CVE-2022-21688)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and
    chat with friends using the Tor network. Affected versions of the desktop application were found to be
    vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing. Roughly 20 bytes
    lead to 2GB memory consumption and this can be triggered multiple times. To be abused, this vulnerability
    requires rendering in the history tab, so some user interaction is required. An adversary with knowledge
    of the Onion service address in public mode or with authentication in private mode can perform a Denial of
    Service attack, which quickly results in out-of-memory for the server. This requires the desktop
    application with rendered history, therefore the impact is only elevated. This issue has been patched in
    version 2.5. (CVE-2022-21688)

ID	Name	Product	Family	Type	Severity
260710	Linux Distros Unpatched Vulnerability : CVE-2022-21688	Nessus	Misc.	Local	medium
420368	SCA: security update for onionshare-cli (GHSA-x7wr-283h-5h2v)	Tenable Cloud Security	SCA Checks	Local	high
420368	SCA: security update for onionshare-cli (GHSA-x7wr-283h-5h2v)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2022-21688

high

Tenable Plugins

medium

high

high