NetSight
IP …
high7.5

CVE-2020-10593

Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004.

Impact

Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.

Affected products

VendorProductAffected versions
TorprojectTor
from 0.3.5 before 0.3.5.10
after 0.4.1.0 before 0.4.1.9
after 0.4.2.0 through 0.4.2.7
OpensuseBackports Sle
Version 15.0
OpensuseLeap
Version 15.1

Weakness classification

CWE-401

References