← Back

CVE-2012-5573

nvd nist
Published: Jan 1, 2013Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.

Affected (99)

Products: Torproject: Tor
1 product
Tor
Configuration A
99 vulnerable
Vulnerable SoftwareAffected Versions
Torproject
Up to 0.2.3.24
Version 0.0.2
Version 0.0.2 pre13
Version 0.0.2 pre14
Version 0.0.2 pre15
Version 0.0.2 pre16
Version 0.0.2 pre17
Version 0.0.2 pre18
Version 0.0.2 pre19
Version 0.0.2 pre20
Version 0.0.2 pre21
Version 0.0.2 pre22
Version 0.0.2 pre23
Version 0.0.2 pre24
Version 0.0.2 pre25
Version 0.0.2 pre26
Version 0.0.2 pre27
Version 0.0.3
Version 0.0.4
Version 0.0.5
Version 0.0.6.1
Version 0.0.6.2
Version 0.0.6
Version 0.0.7.1
Version 0.0.7.2
Version 0.0.7.3
Version 0.0.7
Version 0.0.8.1
Version 0.0.9.10
Version 0.0.9.1
Version 0.0.9.2
Version 0.0.9.3
Version 0.0.9.4
Version 0.0.9.5
Version 0.0.9.6
Version 0.0.9.7
Version 0.0.9.8
Version 0.0.9.9
Version 0.1.0.10
Version 0.1.0.11
Version 0.1.0.12
Version 0.1.0.13
Version 0.1.0.14
Version 0.1.0.15
Version 0.1.0.16
Version 0.1.0.17
Version 0.1.1.20
Version 0.1.1.21
Version 0.1.1.22
Version 0.1.1.23
Version 0.1.1.24
Version 0.1.1.25
Version 0.1.1.26
Version 0.1.2.13
Version 0.1.2.14
Version 0.1.2.15
Version 0.1.2.16
Version 0.1.2.17
Version 0.1.2.18
Version 0.1.2.19
Version 0.2.0.30
Version 0.2.0.31
Version 0.2.0.32
Version 0.2.0.33
Version 0.2.0.34
Version 0.2.0.35
Version 0.2.2.18
Version 0.2.2.19
Version 0.2.2.20
Version 0.2.2.21
Version 0.2.2.22
Version 0.2.2.23
Version 0.2.2.24
Version 0.2.2.25
Version 0.2.2.26
Version 0.2.2.27
Version 0.2.2.28
Version 0.2.2.29
Version 0.2.2.30
Version 0.2.2.31
Version 0.2.2.32
Version 0.2.2.33
Version 0.2.2.34
Version 0.2.2.35
Version 0.2.2.36
Version 0.2.2.37
Version 0.2.2.38
Version 0.2.3.13 alpha
Version 0.2.3.14 alpha
Version 0.2.3.15 alpha
Version 0.2.3.16 alpha
Version 0.2.3.17 beta
Version 0.2.3.18 rc
Version 0.2.3.19 rc
Version 0.2.3.20 rc
Version 0.2.3.21 rc
Version 0.2.3.22 rc
Version 0.2.3.23 rc
Version 0.2.3

Related CWEs

References (18)

Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.