NetSight
IP …
high7.5Public exploit code

CVE-2018-0491

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.

Affected products

VendorProductAffected versions
TorprojectTor
from 0.3.2.0 before 0.3.2.10

Weakness classification

CWE-416

References