A protocol-list handling bug that could be used to remotely crash directory authorities with a null-pointer exception (CVE-2018-0490).
A bug can be remotely triggered in order to crash relays with a use-after-free pattern (CVE-2018-0491).