CVE-2017-16541: Infoleak
Browser proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. Note: this issue only affects OS X in default configurations. On Linux systems, autofs must be installed for the vulnerability to occur and Windows is not affected.
Other sources
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil.
Upstream issue:
https://trac.torproject.org/projects/tor/ticket/24052
References:
https://blog.torproject.org/tor-browser-709-released https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/ https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/
— Red Hat
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 121.0-2 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 91.12.0esr-1~deb10u1Fixed in 115.6.0esr-1~deb10u1Fixed in 102.15.0esr-1~deb11u1Fixed in 115.6.0esr-1~deb11u1Fixed in 115.5.0esr-1~deb12u1Fixed in 115.6.0esr-1~deb12u1Fixed in 115.6.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:91.12.0-1~deb10u1Fixed in 1:115.6.0-1~deb10u1Fixed in 1:102.13.1-1~deb11u1Fixed in 1:115.6.0-1~deb11u1Fixed in 1:115.5.0-1~deb12u1Fixed in 1:115.6.0-1~deb12u1Fixed in 1:115.6.0-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 60.2.1 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 62 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 60.2 - Upgrade
Upgrade
Tor Browserto a version that resolves this vulnerability.Fixed in 7.0.9
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-16541?
CVE-2017-16541 has been rated as moderate in severity due to its potential to bypass proxy settings.
How do I fix CVE-2017-16541?
To fix CVE-2017-16541, update affected software packages to the recommended versions from your distribution repository.
Which software versions are affected by CVE-2017-16541?
CVE-2017-16541 affects multiple versions of Firefox, Firefox ESR, and Thunderbird as specified in the vulnerability details.
What environments are impacted by CVE-2017-16541?
CVE-2017-16541 specifically impacts OS X environments under default configurations using certain versions of Firefox and Thunderbird.
Can CVE-2017-16541 affect my browsing security?
Yes, CVE-2017-16541 can potentially expose your browsing data by bypassing configured proxy settings, thus risking your online privacy.