Lucene search
Gentoo FoundationMGASA-2023-0017HistoryJan 24, 2023 - 10:58 a.m.
Updated tor packages fix security vulnerability
2023-01-2410:58:25
Gentoo Foundation
advisories.mageia.org
27
tor
security
vulnerability
safesocks
logic error
socks4
socks4a
trove-2022-002
cve-2023-23589
unix
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.002
Percentile
58.7%
SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002. (CVE-2023-23589)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | tor | < 0.4.5.16-1 | tor-0.4.5.16-1.mga8 |
Related
debian
debian
[SECURITY] [DLA 3286-1] tor security update
2023-01-28 13:14:51
[SECURITY] [DSA 5320-1] tor security update
2023-01-16 19:28:46
veracode
veracode
Privilege Escalation
2023-02-14 06:32:49
nessus
nessus
Debian DSA-5320-1 : tor - security update
2023-01-17 00:00:00
Fedora 36 : tor (2023-1254a1fc28)
2023-01-24 00:00:00
Debian DLA-3286-1 : tor - LTS security update
2023-01-29 00:00:00
prion
prion
Design/Logic Flaw
2023-01-14 01:15:00
cve
cve
CVE-2023-23589
2023-01-14 01:15:15
osv
osv
tor - security update
2023-01-28 00:00:00
CVE-2023-23589
2023-01-14 01:15:15
tor - security update
2023-01-16 00:00:00
ubuntucve
ubuntucve
CVE-2023-23589
2023-01-14 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3286-1)
2023-01-29 00:00:00
Mageia: Security Advisory (MGASA-2023-0017)
2023-03-28 00:00:00
Fedora: Security Advisory for tor (FEDORA-2023-c290171664)
2023-01-25 00:00:00
cvelist
cvelist
CVE-2023-23589
2023-01-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2219
2023-08-22 09:57:32
fedora
fedora
[SECURITY] Fedora 36 Update: tor-0.4.7.13-1.fc36
2023-01-25 02:38:05
[SECURITY] Fedora 37 Update: tor-0.4.7.13-1.fc37
2023-01-25 01:50:18
nvd
nvd
CVE-2023-23589
2023-01-14 01:15:15
debiancve
debiancve
CVE-2023-23589
2023-01-14 01:15:15
gentoo
gentoo
Tor: Multiple Vulnerabilities
2023-05-03 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.002
Percentile
58.7%
Related for MGASA-2023-0017