SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly.

MEDIUM 5.0EPSS 1.29%

Does this matter?

Lower severity and a low EPSS score (1.29%). Track it; it rarely justifies an emergency change on its own.

Description

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
1.29% probability · 69th percentile
CISA KEV
Not listed
Affected
torproject/tor
Source
security@debian.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.