{"id":"CVE-2017-0380","aliases":["DEBIAN-CVE-2017-0380","DSA-3993-1","EUVD-2017-0734","GHSA-rjc9-v6hh-hq3j","MGASA-2017-0353","UBUNTU-CVE-2017-0380","openSUSE-SU-2024:11469-1"],"status":"published","title":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x...","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01541,"percentile":0.75097,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2017-09-18T16:00:00Z","modified":"2026-10-24T14:12:27Z","fixes":[{"ecosystem":"Debian:12","package":"tor","fixed_in":["0.3.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tor","fixed_in":["0.3.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tor","fixed_in":["0.3.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"tor","fixed_in":["0.2.9.12-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"tor","fixed_in":["0.2.8.15-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"tor","fixed_in":["0.2.9.12-1.mga6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tor","fixed_in":["0.2.9.14-1ubuntu1~16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9.12-1"}]}],"versions":["0.2.9.10-1","0.2.9.11-1","0.2.9.11-1~bpo8+1","0.2.9.11-1~deb9u1","0.2.9.12-1~bpo8+1"]},{"source":"osv","ecosystem":"Mageia:5","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8.15-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9.12-1.mga6"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9.14-1ubuntu1~16.04.2"}]}],"versions":["0.2.6.10-1ubuntu2","0.2.7.6-1ubuntu1","0.2.9.11-1ubuntu1~16.04.1","0.2.9.14-1ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.6.7-2.2"}]}],"bundled":22}],"products":[{"vendor":"torproject","product":"tor"}],"references":[{"url":"https://trac.torproject.org/projects/tor/ticket/23490","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Patch","Vendor Advisory","fix","report"]},{"url":"https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"http://www.securitytracker.com/id/1039519","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.debian.org/security/2017/dsa-3993","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0380"},{"url":"https://github.com/advisories/GHSA-rjc9-v6hh-hq3j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-0380","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0353.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21740","tags":["report"]},{"url":"https://lists.torproject.org/pipermail/tor-talk/2017-September/043585.html","tags":["web"]},{"url":"https://blog.torproject.org/new-tor-stable-releases-02815-02912-03011-fix-onion-service-security-issue","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-0380","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0380","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38385","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-0380","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","status":"published","published":"2017-09-18T16:00:00Z","modified":"2024-08-05T13:03:57.111Z","updated_at":"2026-11-02T14:33:22.699876Z"}],"euvd":[{"id":"EUVD-2017-0734","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","status":"published","published":"2017-09-18T16:00:00Z","modified":"2024-08-05T13:03:57Z","updated_at":"2026-11-03T02:39:24.365813Z"}],"ghsa":[{"id":"GHSA-rjc9-v6hh-hq3j","title":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x...","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","status":"published","published":"2022-05-17T00:26:09Z","modified":"2023-02-03T05:01:45Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:53:02.192117Z"}],"nvd":[{"id":"CVE-2017-0380","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","status":"published","published":"2017-09-18T16:29:00.207Z","modified":"2026-06-17T00:57:36.247Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:03:59.716532Z"}],"osv":[{"id":"CVE-2017-0380","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","status":"published","published":"2017-09-18T16:29:00.207Z","modified":"2026-10-24T14:12:27.853102856Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2017-0380","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","status":"published","published":"2017-09-18T16:29:00.207Z","modified":"2026-09-01T20:03:40.166221418Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"UBUNTU-CVE-2017-0380","description":"The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.","status":"published","published":"2017-09-18T16:29:00Z","modified":"2025-09-08T16:44:00Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DSA-3993-1","title":"tor - security update","status":"published","published":"2017-10-06T00:00:00Z","modified":"2026-03-09T01:22:18.321156Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0353","title":"Updated tor packages fix security vulnerability","description":"Due to the code that reports an error during the construction of an\nintroduction point circuit, it is possible that some hidden services\nwill sometimes write sensitive information into their logs if the\nSafeLogging option is disabled.  Note that SafeLogging is enabled by\ndefault (CVE-2017-0380).\n","status":"published","published":"2017-09-21T13:43:32Z","modified":"2026-04-16T06:25:52.288654043Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:11469-1","title":"tor-0.4.6.7-2.2 on GA media","description":"These are all security issues fixed in the tor-0.4.6.7-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:38.644616Z","updated_at":"2026-11-02T16:58:35.195147Z"}]}}