PT-2018-8857 · Tor+1 · Tor+1

T4Rkd3Vilz · Publicado 2018-03-05 · Atualizado 2024-06-15 · CVE-2018-0491

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tor versions 0.3.2.x through 0.3.2.9

Description A use-after-free issue was discovered, allowing remote attackers to cause a denial of service because the KIST implementation allows a channel to be added more than once in the pending list.

Recommendations For Tor versions 0.3.2.x through 0.3.2.9, update to version 0.3.2.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the KIST implementation to minimize the risk of exploitation.

Exploit

Correção

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2018-1419

CVE-2018-0491

MGASA-2018-0161

OPENSUSE-SU-2018:0614-1

OPENSUSE-SU-2018:0620-1

OPENSUSE-SU-2024:11469-1

Produtos afetados

Alt Linux

Tor

Referências · 41

• 🔥 https://exploit-db.com/exploits/44994 · Exploit
• https://suse.com/security/cve/CVE-2017-0380 · Nota
• https://bugzilla.suse.com/1083846 · Nota
• https://suse.com/security/cve/CVE-2020-10592 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0491 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-38385 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-0491 · Aviso do Fabricante
• https://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02915 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-34549 · Nota
• https://suse.com/security/cve/CVE-2018-0490 · Nota
• https://suse.com/security/cve/CVE-2020-15572 · Nota
• https://suse.com/security/cve/CVE-2017-8823 · Nota
• https://suse.com/security/cve/CVE-2017-8820 · Nota
• https://advisories.mageia.org/MGASA-2018-0161.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-34550 · Nota