NetSight
IP …
high7.5

CVE-2021-28089

Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001.

Impact

Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001.

Affected products

VendorProductAffected versions
TorprojectTor
before 0.3.5.14
from 0.4.4.4 before 0.4.4.8
from 0.4.5.0 before 0.4.5.7
Versions 0.4.4.0, 0.4.4.1, 0.4.4.2
FedoraprojectFedora
Version 33

Weakness classification

CWE-400

References