CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2017-0376 – Debian Security Advisory 3877-1
https://notcve.org/view.php?id=CVE-2017-0376
09 Jun 2017 — The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit. La función de servicio oculto en Tor antes de la versión 0.3.0.8 permite una denegación de servicio (fallo de aserción y salida de demonio) en la función connection_edge_process_relay_cell a través de una célula BEGIN_DIR en un circuito de rendezvous It has been discovered that Tor, a connection-based ... • http://www.debian.org/security/2017/dsa-3877 • CWE-617: Reachable Assertion •
CVSS: 7.5EPSS: 2%CPEs: 5EXPL: 0CVE-2016-8860 – Gentoo Linux Security Advisory 201612-45
https://notcve.org/view.php?id=CVE-2016-8860
24 Dec 2016 — Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buf_t data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data. Tor en versiones anteriores a 0.2.8.9 y 0.2.9.x en versiones anteriores a 0.2.9.4-alpha tenía funciones internas autorizadas a esperar que buf_t data tení... • http://openwall.com/lists/oss-security/2016/10/19/11 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •