Remote Relay Enumeration Vulnerability in Tor Package
Summary
DEBIAN-CVE-2011-2769: Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by usi... Affects tor versions < 0.2.2.34-1. Fixed in 0.2.2.34-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Tor package is a crucial component of the Tor network, which enables anonymous communication over the internet. It is widely used for privacy protection and bypassing censorship. The package allows users to connect to the Tor network and access hidden services. However, certain configurations, particularly when set up as a bridge, expose the package to vulnerabilities that can be exploited by malicious actors.
Vulnerability Detail
The vulnerability identified as DEBIAN-CVE-2011-2769 affects Tor versions prior to 0.2.2.34. When configured as a bridge, the Tor package improperly handles the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated. This flaw allows remote relays to enumerate bridges, potentially compromising the anonymity and security of users relying on these bridges for private communication.
How To Fix
Minimum fixed version
0.2.2.34-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade torTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid configuring Tor as a bridge until they have updated to the patched version. This will help mitigate the risk of remote relay enumeration while waiting for the update.
Conclusion
The Tor package has a significant vulnerability that affects its configuration as a bridge, allowing for potential enumeration of bridges by remote relays. It is crucial for users to update to the patched version to maintain their privacy and security. Additionally, utilizing tools like Vulert can help monitor for such vulnerabilities in the future.
See every vulnerability recorded for tor →
FAQ
The vulnerability allows remote relays to enumerate bridges, which can compromise user anonymity and security.
You can check your version of Tor by running 'tor --version' in the terminal. If it is below 0.2.2.34, it is affected.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time using a manifest file like package-lock.json.
If you cannot update immediately, consider not using Tor as a bridge until you can apply the patch.
More information can be found in the official Debian CVE database or by visiting the provided source link.
References
Related vulnerabilities
Recent vulnerabilities recorded for tor.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
