tocsin

Debian/libtoxcore: low 3.1

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address (when knowing only their Tox Id) by p

Action: Upgrade libtoxcore to 0.2.2-1 or later.

Affected

introducedfixedlast affected
00.2.2-1-

Fixed versions

0.2.2-1

Sources

published · modified · JSON