CVE-2018-0490

Published: Mar 5, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.

Affected (18)

Products: Torproject: Tor · Debian: Debian Linux

1 product

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Torproject Tor	Up to 0.2.9.14
Torproject Tor	From 0.3.1.7 to 0.3.1.9
Torproject Tor	Version 0.3.1.1 alpha
Torproject Tor	Version 0.3.1.2 alpha
Torproject Tor	Version 0.3.1.3 alpha
Torproject Tor	Version 0.3.1.4 alpha
Torproject Tor	Version 0.3.1.5 alpha
Torproject Tor	Version 0.3.1.6 rc
Torproject Tor	Version 0.3.2.1 alpha
Torproject Tor	Version 0.3.2.2 alpha
Torproject Tor	Version 0.3.2.3 alpha
Torproject Tor	Version 0.3.2.4 alpha
Torproject Tor	Version 0.3.2.5 alpha
Torproject Tor	Version 0.3.2.6 alpha
Torproject Tor	Version 0.3.2.7 rc
Torproject Tor	Version 0.3.2.8 rc
Torproject Tor	Version 0.3.2.9