CVE-2017-0375 — Reachable Assertion in TOR

CWE-617 — Reachable Assertion7 documents5 sources
Severity
7.5HIGHNVD
EPSS
1.4%
top 19.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Torproject TOR
Timeline
PublishedJun 9
Latest updateMay 13

Description

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDtorproject/tor< 0.3.0.8

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2mmr-2hq6-5c3v: The hidden-service feature in Tor before 0↗2022-05-13
▶
CVEList
CVE-2017-0375: The hidden-service feature in Tor before 0↗2017-06-09
▶

📋Vendor Advisories

1
Debian
CVE-2017-0375: tor - The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (ass...↗2017
▶

💬Community

3
Bugzilla
CVE-2017-0375 CVE-2017-0376 tor: Multiple vulnerabilities [fedora-all]↗2017-06-14
▶
Bugzilla
CVE-2017-0375 CVE-2017-0376 tor: Multiple vulnerabilities [epel-all]↗2017-06-14
▶
Bugzilla
CVE-2017-0375 CVE-2017-0376 tor: Multiple vulnerabilities↗2017-06-13
▶
CVE-2017-0375 — Reachable Assertion in Torproject TOR | cvebase