Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-23589

Опубликовано: 14 янв. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.5

Описание

The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

0.4.7.13-1
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

not-affected

0.4.7.13-1
esm-apps/resolute

not-affected

0.4.7.13-1
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needs-triage

Показывать по

EPSS

Процентиль: 59%
0.00856
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
почти 4 года назад

The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002.

CVSS3: 6.5
debian
почти 4 года назад

The SafeSocks option in Tor before 0.4.7.13 has a logic error in which ...

CVSS3: 6.5
github
почти 4 года назад

The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002.

CVSS3: 6.5
altlinux
почти 4 года назад

ALT-PU-2023-1190: package `tor` update to version 0.4.7.13-alt1

CVSS3: 6.5
altlinux
почти 4 года назад

ALT-PU-2023-1040: package `tor` update to version 0.4.7.13-alt1

EPSS

Процентиль: 59%
0.00856
Низкий

6.5 Medium

CVSS3