CVE-2018-0490

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-0490
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-0490.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-0490
Related
Published
2018-03-05T15:29:00Z
Modified
2024-10-12T03:01:56.716571Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.

References

Affected packages

Debian:11 / tor

Package

Name
tor
Purl
pkg:deb/debian/tor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3.2.10-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / tor

Package

Name
tor
Purl
pkg:deb/debian/tor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3.2.10-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / tor

Package

Name
tor
Purl
pkg:deb/debian/tor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3.2.10-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/torproject/tor

Affected ranges

Type
GIT
Repo
https://github.com/torproject/tor
Events
Last affected
023d756bfc04c244403ca7fb13e3e077dbe16408
Last affected
290274dbb5428bc5d99926ce5d7f824165be84e8
Last affected
304e2151ac96bad8d5f27c63b070b06683d50665
Last affected
3f9bd01bf5736ff66af34f05b4611f95fcb7ec51
Last affected
615dbdb0e094d4ef0b1982d06e62a8058463a28a
Last affected
61625b8f26384a4a5d407db3f96e343c4dac36f8
Last affected
63b84335dc590499e5f22498383d6a3432e91ec4
Introduced
6babd3d9ba9318b38b5af7278875efe84055a1b0
Last affected
727d3f1b5e6eeda721339151e3cd49ffa7efbb29
Last affected
83389502ee6314658bcddd324c3652543b27da6b
Last affected
87012d076ef58bb9216c7952e0fd536f124aea68
Last affected
940308f493edd10ff8de2ef743e6872d1f8a4f9d
Last affected
9e8b762fcecfece64aae70ae640aaa59fd227ca5
Last affected
d499a5a708f7298b44dd02389412a0ce3b148f94
Last affected
dc47d936d47ffc25dc0b5e59009435cda542d240
Last affected
e2a2704f17415d8a63eceeaf5508174b1f66d1be
Last affected
efc306c59aa9ee1a32d1979df731f25904852709
Last affected
fab91a290ded3e74e806cf9d05b36b6fcb695785

Affected versions

tor-0.*

tor-0.3.1.7