CVE-2017-0376
Fixed in a distro release EPSS 2%
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.
Products: torproject tor, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | tor | 0.3.0.8-1 |
| Debian 12 | tor | 0.2.9.11-1 |
| Debian 13 | tor | 0.2.9.11-1 |
| Debian 14 | tor | 0.2.9.11-1 |
| Debian 7 | tor | 0.2.4.29-1 |
| Debian 8 | tor | 0.2.5.14-1 |
| Debian 9 | tor | 0.2.9.11-1~deb9u1 |
| Ubuntu 14.04 LTS | tor | 0.2.4.27-1ubuntu0.1 |
| openSUSE Tumbleweed | tor | 0.4.6.7-2.2 |