Lucene search
Ubuntu.comUB:CVE-2023-23589HistoryJan 14, 2023 - 12:00 a.m.
CVE-2023-23589
2023-01-1400:00:00
ubuntu.com
ubuntu.com
15
tor
safesocks
logic error
socks4
socks4a
trove-2022-002
cve-2023-23589
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.002
Percentile
58.7%
The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the
unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka
TROVE-2022-002.
Bugs
Related
osv
osv
tor - security update
2023-01-28 00:00:00
CVE-2023-23589
2023-01-14 01:15:15
tor - security update
2023-01-16 00:00:00
mageia
mageia
Updated tor packages fix security vulnerability
2023-01-24 10:58:25
openvas
openvas
Debian: Security Advisory (DLA-3286-1)
2023-01-29 00:00:00
Mageia: Security Advisory (MGASA-2023-0017)
2023-03-28 00:00:00
Fedora: Security Advisory for tor (FEDORA-2023-c290171664)
2023-01-25 00:00:00
veracode
veracode
Privilege Escalation
2023-02-14 06:32:49
debian
debian
[SECURITY] [DLA 3286-1] tor security update
2023-01-28 13:14:51
[SECURITY] [DSA 5320-1] tor security update
2023-01-16 19:28:46
nessus
nessus
Debian DSA-5320-1 : tor - security update
2023-01-17 00:00:00
Fedora 36 : tor (2023-1254a1fc28)
2023-01-24 00:00:00
Debian DLA-3286-1 : tor - LTS security update
2023-01-29 00:00:00
prion
prion
Design/Logic Flaw
2023-01-14 01:15:00
cve
cve
CVE-2023-23589
2023-01-14 01:15:15
rosalinux
rosalinux
Advisory ROSA-SA-2023-2219
2023-08-22 09:57:32
cvelist
cvelist
CVE-2023-23589
2023-01-14 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: tor-0.4.7.13-1.fc36
2023-01-25 02:38:05
[SECURITY] Fedora 37 Update: tor-0.4.7.13-1.fc37
2023-01-25 01:50:18
nvd
nvd
CVE-2023-23589
2023-01-14 01:15:15
debiancve
debiancve
CVE-2023-23589
2023-01-14 01:15:15
gentoo
gentoo
Tor: Multiple Vulnerabilities
2023-05-03 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.002
Percentile
58.7%
Related for UB:CVE-2023-23589