Description
Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tor | 0.1.0.14-1 | — |
| Debian 13 | tor | 0.1.0.14-1 | — |
| Debian 12 | tor | 0.1.0.14-1 | — |
References
- 16424 third-party-advisory
- [or-announce] 20050811 Tor security advisory: DH handshake flaw mailing-list
- 20050819 Fwd: Tor security advisory: DH handshake flaw mailing-list
- 1014739 vdb-entry