0.158 Low
EPSS
Percentile
95.9%
The Tor Project reports:
Remotely exploitable bug that could be used to crash instances of Tor remotely by overflowing on the heap. Remote-code execution hasn’t been confirmed, but can’t be ruled out. Everyone should upgrade.
archives.seul.org/or/announce/Dec-2010/msg00000.html
archives.seul.org/or/talk/Dec-2010/msg00167.html
gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog
gitweb.torproject.org/tor.git/blob/release-0.2.2:/ChangeLog