CVE-2017-16541

概要

参考情報

• securityfocus.com/bid/101665 · Broken Link
• securitytracker.com/id/1041610 · Broken Link
• access.redhat.com/errata/RHSA-2018:2692 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:2693 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:3403 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:3458 · Third Party Advisory
• blog.torproject.org/tor-browser-709-released · Issue Tracking
• bugzilla.mozilla.org/show_bug.cgi · Exploit
• lists.debian.org/debian-lts-announce/2018/11/msg00011.html · Mailing List
• security.gentoo.org/glsa/201810-01 · Third Party Advisory
• security.gentoo.org/glsa/201811-13 · Third Party Advisory
• trac.torproject.org/projects/tor/ticket/24052 · Issue Tracking
• bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users · Issue Tracking
• debian.org/security/2018/dsa-4327 · Third Party Advisory
• wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability · Issue Tracking

tor のその他の脆弱性

• CVE-2026-77642緊急 9.3tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type…
• CVE-2026-77641高 8.2tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_fro…
• CVE-2026-77640中 5.3tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reac…
• CVE-2026-77639中 5.3Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under…
• CVE-2026-77638緊急 9.0Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersona…