CVE-2012-4922

2012-09-1400:00:00

ubuntu.com

0.028 Low

EPSS

Percentile

90.6%

JSON

The tor_timegm function in common/util.c in Tor before 0.2.2.39, and
0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which
allows remote attackers to cause a denial of service (assertion failure and
daemon exit) via a malformed directory object, a different vulnerability
than CVE-2012-4419.

OSVersionArchitecturePackageVersionFilename
ubuntu12.10noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu13.04noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu13.10noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu14.04noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu14.10noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu15.04noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu15.10noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu16.04noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu16.10noarchtor< 0.2.3.22-rc-1UNKNOWN
ubuntu17.04noarchtor< 0.2.3.22-rc-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.10	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	13.04	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	13.10	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	14.04	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	14.10	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	15.04	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	15.10	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	16.04	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	16.10	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN
ubuntu	17.04	noarch	tor	< 0.2.3.22-rc-1	UNKNOWN