NetSight
IP …
high7.5

CVE-2018-0490

An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10.

Impact

An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.

Affected products

VendorProductAffected versions
TorprojectTor
through 0.2.9.14
from 0.3.1.7 through 0.3.1.9
Versions 0.3.1.1, 0.3.1.2, 0.3.1.3, 0.3.1.4
DebianDebian Linux
Version 9.0

Weakness classification

CWE-476

References