Out-of-bounds

The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...

PT-2012-4782

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.2.38 Description The issue is related to the networkstatus parse vote from string function in routerparse.c, which does not properly handle an invalid flavor name. This allows remote attackers to cause a denial of...