Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation. (CVE-2022-33903)

The remote host is affected by the vulnerability described in GLSA-202305-11 (Tor: Multiple Vulnerabilities)

  - Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature     verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007.
    (CVE-2021-38385)

  - Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation. (CVE-2022-33903)

  - The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be     used but not the safe SOCKS4a protocol, aka TROVE-2022-002. (CVE-2023-23589)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10023-1 advisory.

  - Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation. (CVE-2022-33903)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
407411	Alpine: multiple tor packages: security update to 0.4.7.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407411	Alpine: multiple tor packages: security update to 0.4.7.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
175036	GLSA-202305-11 : Tor: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	medium
162490	openSUSE 15 Security Update : tor (openSUSE-SU-2022:10023-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-33903

high

Tenable Plugins

high

high

medium

high