4 matches found
SUSE CVE-2009-2425
Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...
5CVSS6.8AI score0.02517EPSS
SaveExploits0References3
MGASA-2017-0444 Updated tor packages fix security vulnerability
When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...
8.1CVSS5.4AI score0.01956EPSS
SaveExploits0References3
20