CVE-2018-0491 | BDVDB-2026-97392 Detail

Tor

Description#

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://trac.torproject.org/projects/tor/ticket/24700
https://trac.torproject.org/projects/tor/ticket/25117
https://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02915
https://www.exploit-db.com/exploits/44994/

Exploit#

https://www.exploit-db.com/exploits/44994/

History#

Version 12018-03-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.