NetSight
IP …
high7.5

CVE-2020-15572

Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network …

Impact

Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network Security Services (NSS), aka TROVE-2020-001.

Affected products

VendorProductAffected versions
TorprojectTor
before 0.3.5.11
after 0.4.2.0 before 0.4.2.8
after 0.4.3.0 before 0.4.3.6
Versions 0.4.4.0, 0.4.4.1

Weakness classification

CWE-125

References