VulnerabilityModified
CVE-2017-0375
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.
HIGH 7.5EPSS 2.61%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.
- CVSS 3.0
- 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 2.61% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-617
- Affected
- torproject/tor
- Source
- security@debian.org
References
- http://www.securityfocus.com/bid/99017Third Party Advisory, VDB Entry
- https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7Issue Tracking, Patch, Vendor Advisory
- https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.htmlMailing List, Third Party Advisory
- https://trac.torproject.org/projects/tor/ticket/22493Issue Tracking
- http://www.securityfocus.com/bid/99017Third Party Advisory, VDB Entry
- https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7Issue Tracking, Patch, Vendor Advisory
- https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.htmlMailing List, Third Party Advisory
- https://trac.torproject.org/projects/tor/ticket/22493Issue Tracking
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.