CVE-2012-4419: Undefined Security Weakness

The comparetoraddrtoaddrpolicy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service assertion failure and daemon exit via a zero-valued port field that is not properly handled during policy comparison...

CVE-2011-1924: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...