Test ID:	1.3.6.1.4.1.25623.1.1.10.2017.0444
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2017-0444)
Summary:	The remote host is missing an update for the 'tor' package(s) announced via the MGASA-2017-0444 advisory.
Description:	Summary: The remote host is missing an update for the 'tor' package(s) announced via the MGASA-2017-0444 advisory. Vulnerability Insight: When checking for replays in the INTRODUCE1 cell data for a (legacy) onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid encryption. This can lead to a traffic confirmation attack (CVE-2017-8819). Denial of service issue where an attacker could crash a directory authority using a malformed router descriptor (CVE-2017-8820). Denial of service bug where an attacker could use a malformed directory object to cause a Tor instance to pause while OpenSSL would try to read a passphrase from the terminal (CVE-2017-8821). When running as a relay, Tor could build a path through itself, especially when it lost the version of its descriptor appearing in the consensus. When running as a relay, it could also choose itself as a guard (CVE-2017-8822). Use-after-free error that could crash v2 Tor onion services when they failed to open circuits while expiring introduction points (CVE-2017-8823). Affected Software/OS: 'tor' package(s) on Mageia 5, Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8819 Debian Security Information: DSA-4054 (Google Search) https://www.debian.org/security/2017/dsa-4054 Common Vulnerability Exposure (CVE) ID: CVE-2017-8820 Common Vulnerability Exposure (CVE) ID: CVE-2017-8821 Common Vulnerability Exposure (CVE) ID: CVE-2017-8822 Common Vulnerability Exposure (CVE) ID: CVE-2017-8823
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.