cbcvebase.
CVE-2012-5573
published 2013-01-01

CVE-2012-5573: The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might…

medium5CVSS 3.1
AVNACLAuNCNINAP
The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.

Affected

89 ranges· showing 25
VendorProductVersion rangeFixed in
debiantor< tor 0.2.3.25-1 (bookworm)tor 0.2.3.25-1 (bookworm)
torprojecttor<= 0.2.3.24—
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——
torprojecttor——

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM