CVE-2018-25022

published 2021-12-13

CVE-2018-25022: The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP…

Priority P4 14 low 3.1 CVSS 3.1

AV N AC H PR L UI N S U C L I N A N

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address (when knowing only their Tox Id) by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion connection with the attacker, guessing the target's DHT public key and creating a DHT node with public key close to it, and finally onion-routing a NAT Ping Request to the target, requesting it to ping the just created DHT node.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	libtoxcore	< libtoxcore 0.2.2-1 (bookworm)	libtoxcore 0.2.2-1 (bookworm)
toktok	toxcore	< 0.2.2	0.2.2

CVSS provenance

nvd v3.1 3.1 LOW CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:P/I:N/A:N

osv 3.1 LOW

vendor_debian 3.1 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200