PT-2017-9848 · Tor+1 · Tor+1
Publicado
2016-10-18
·
Atualizado
2017-07-01
·
CVE-2016-8860
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Tor versions prior to 0.2.8.9
Tor versions 0.2.9.x prior to 0.2.9.4-alpha
Description
The issue allows remote attackers to cause a denial of service, resulting in the crash of clients, hidden services, relays, or authorities, via crafted data. This is due to internal functions expecting NUL termination of buf t data, which was not ensured by the implementation of or/buffers.c.
Recommendations
For Tor versions prior to 0.2.8.9, update to version 0.2.8.9 or later.
For Tor versions 0.2.9.x prior to 0.2.9.4-alpha, update to version 0.2.9.4-alpha or later.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Tor