Exit Zen
1
English type: Plain text
The details of TROVE-2023-006 haven't been disclosed by the Tor Project to
leave time for users to upgrade before revealing more. We only know that the
Tor Project describes TROVE-2023-006 as a "[*remote triggerable assert on
onion
services*](https://gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/TROVE)".
Les détails de TROVE-2023-006 n'ont pas été divulgués par le Projet Tor pour laisser du temps aux personnes l'utilisant de mettre à jour avant d'en révéler plus. Nous savons uniquement que le Projet Tor décrit TROVE-2023-006 comme "[*déclenchable a distance depuis les services onion*](https://gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/TROVE)".
369/3260 · 326
2
English type: Plain text
Our team thinks that this vulnerability could affect Tails users who are
creating onion services from their Tails, for example when sharing files or
publishing a website using *OnionShare*.
Notre équipe pense que cette faille de sécurité pourrait affecter les personnes utilisant Tails qui créent des services onion depuis leur Tails, par exemple en partageant des fichiers ou en publiant un site web avec *OnionShare*.
236/1960 · 196
3
English type: Plain text
This vulnerability might allow an attacker who already knows your
*OnionShare* address to make your Tor client crash. A powerful attacker might
be able to further exploit this crash to reveal your IP address.
0/2150 · 215
4
English type: Plain text
This analysis is only a hypothesis because our team doesn't have access to
more details about this vulnerability. Still, we are releasing this emergency
release as a precaution.
0/1840 · 184
5
English type: Plain text
*OnionShare* is the only application included in Tails that creates onion
services. You are not affected by this vulnerability if you don't use
*OnionShare* in Tails and only use Tails to connect to onion services and
don't create onion services using Additional Software.
0/2810 · 281
The translation has come to an end.