Not rated
CVE-2018-0490 An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10
Description
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tor | Versions not published |
Other CVEs of Tor
The 4 CVEs of Tor →
CVE-2025-4444
A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17
6.3
Medium
CVE-2018-0491
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10
Not rated
CVE-2017-0377
Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's…
Not rated