CVE-2017-16541

Published: Nov 4, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.

Affected (16)

Products: Torproject: Tor · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Debian: Debian Linux

1 product

6 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

1 product

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Torproject Tor	Before 7.0.9

Running on/with	Platform Versions
Apple Macos	All versions
Linux Linux Kernel	All versions

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (30)

http://www.securityfocus.com/bid/101665

Source: cve@mitre.org

Broken Link

http://www.securitytracker.com/id/1041610

Source: cve@mitre.org

Broken Link

https://access.redhat.com/errata/RHSA-2018:2692

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2693

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3403

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3458

Source: cve@mitre.org

Third Party Advisory

https://blog.torproject.org/tor-browser-709-released

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1412081

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201810-01

Source: cve@mitre.org

Third Party Advisory

https://security.gentoo.org/glsa/201811-13

Source: cve@mitre.org

Third Party Advisory

https://trac.torproject.org/projects/tor/ticket/24052

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://www.debian.org/security/2018/dsa-4327

Source: cve@mitre.org

Third Party Advisory

https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://www.securityfocus.com/bid/101665

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securitytracker.com/id/1041610

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://access.redhat.com/errata/RHSA-2018:2692

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2693

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3403

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3458

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://blog.torproject.org/tor-browser-709-released

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1412081

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201810-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.gentoo.org/glsa/201811-13

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://trac.torproject.org/projects/tor/ticket/24052

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://www.debian.org/security/2018/dsa-4327

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.