CVE-2017-16541
Fixed in a distro release EPSS 4%
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Products: torproject tor, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | firefox-esr | 60.2.0esr-1 |
| Debian 12 | thunderbird | 1:60.2.1-1 |
| Debian 13 | firefox-esr | 60.2.0esr-1 |
| Debian 13 | thunderbird | 1:60.2.1-1 |
| Debian 14 | firefox-esr | 60.2.0esr-1 |
| Debian 14 | thunderbird | 1:60.2.1-1 |
| Debian 8 | thunderbird | 1:60.3.0-1~deb8u1 |
| Debian 9 | thunderbird | 1:60.2.1-2~deb9u1 |
| Red Hat Enterprise Linux 6 | firefox | 0:60.2.0-1.el6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:60.2.0-1.el6 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:60.2.1-5.el6 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:60.2.1-5.el6 |
| Red Hat Enterprise Linux 7 | firefox | 0:60.2.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:60.2.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:60.2.1-4.el7_5 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:60.2.1-4.el7_5 |
| SUSE Enterprise Storage 4 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Enterprise Storage 4 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Enterprise Storage 4 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Enterprise Storage 4 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Enterprise Storage 4 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Desktop 12 SP3 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox | 60.2.0-3.10.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox-branding-SLE | 60-4.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server 12 SP3 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server 12 SP3 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server 12 SP3 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server 12 SP4 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server 12 SP4 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server 12 SP4 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server 12-LTSS | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server 12-LTSS | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server 12-LTSS | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server 12-LTSS | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | mozilla-nspr | 4.19-19.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Linux Enterprise Workstation Extension 15 | MozillaThunderbird | 60.2.1-3.13.1 |
| SUSE OpenStack Cloud 7 | MozillaFirefox | 60.2.2esr-109.46.1 |
| SUSE OpenStack Cloud 7 | MozillaFirefox-branding-SLE | 60-32.3.1 |
| SUSE OpenStack Cloud 7 | apache2-mod_nss | 1.0.14-19.6.3 |
| SUSE OpenStack Cloud 7 | mozilla-nspr | 4.19-19.3.1 |
| SUSE OpenStack Cloud 7 | mozilla-nss | 3.36.4-58.15.3 |
| SUSE Package Hub 12 | MozillaThunderbird | 60.3.0-74.2 |
| Ubuntu 16.04 LTS | firefox | 62.0+build2-0ubuntu0.16.04.3 |
| Ubuntu 16.04 LTS | thunderbird | 1:60.2.1+build1-0ubuntu0.16.04.4 |
| Ubuntu 18.04 LTS | firefox | 62.0+build2-0ubuntu0.18.04.3 |
| Ubuntu 18.04 LTS | thunderbird | 1:60.2.1+build1-0ubuntu0.18.04.2 |
| openSUSE Tumbleweed | MozillaFirefox | 92.0-1.2 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |