An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | 3.11-community | noarch | tor | <Â 0.4.4.9-r0 | UNKNOWN |
Alpine | 3.12-community | noarch | tor | <Â 0.4.4.9-r0 | UNKNOWN |