4 matches found
SUSE CVE-2009-2425
Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...
MGASA-2017-0444 Updated tor packages fix security vulnerability
When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...
DEBIAN-CVE-2009-2425
Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...
CVE-2009-2425
Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...