NetSight
IP …
high7.5

CVE-2019-8955

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relay…

Impact

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.

Affected products

VendorProductAffected versions
TorprojectTor
before 0.3.3.12
from 0.3.4.8 before 0.3.4.11
Versions 0.3.4.0, 0.3.4.1, 0.3.4.2, 0.3.4.3

Weakness classification

CWE-770

References