high7.5
CVE-2021-34550
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006.
Impact
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torproject | Tor | before 0.3.5.15 from 0.4.0.0 before 0.4.4.9 from 0.4.5.0 before 0.4.5.9 from 0.4.6.0 before 0.4.6.5 |