PT-2018-8857 · Tor+1 · Tor+1

T4Rkd3Vilz · Published 2018-03-05 · Updated 2024-06-15 · CVE-2018-0491

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tor versions 0.3.2.x through 0.3.2.9

Description A use-after-free issue was discovered, allowing remote attackers to cause a denial of service because the KIST implementation allows a channel to be added more than once in the pending list.

Recommendations For Tor versions 0.3.2.x through 0.3.2.9, update to version 0.3.2.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the KIST implementation to minimize the risk of exploitation.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2018-1419

CVE-2018-0491

MGASA-2018-0161

OPENSUSE-SU-2018:0614-1

OPENSUSE-SU-2018:0620-1

OPENSUSE-SU-2024:11469-1

Affected Products

Alt Linux

Tor

References · 41

• 🔥 https://exploit-db.com/exploits/44994 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-0491 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-0491 · Vendor Advisory
• https://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02915 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0161.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2018:0614-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-0491 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11469-1 · Vendor Advisory
• https://trac.torproject.org/projects/tor/ticket/24700 · Vendor Advisory
• https://trac.torproject.org/projects/tor/ticket/25117 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-0491 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2018:0620-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-0491 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0161 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0491 · Vendor Advisory