CVE-2012-4419
14.09.2012, 18:55
The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison.Enginsight
| Vendor | Product | Version |
|---|---|---|
| torproject | tor | 𝑥 ≤ 0.2.2.38 |
| torproject | tor | 0.0.2 |
| torproject | tor | 0.0.2:pre13 |
| torproject | tor | 0.0.2:pre14 |
| torproject | tor | 0.0.2:pre15 |
| torproject | tor | 0.0.2:pre16 |
| torproject | tor | 0.0.2:pre17 |
| torproject | tor | 0.0.2:pre18 |
| torproject | tor | 0.0.2:pre19 |
| torproject | tor | 0.0.2:pre20 |
| torproject | tor | 0.0.2:pre21 |
| torproject | tor | 0.0.2:pre22 |
| torproject | tor | 0.0.2:pre23 |
| torproject | tor | 0.0.2:pre24 |
| torproject | tor | 0.0.2:pre25 |
| torproject | tor | 0.0.2:pre26 |
| torproject | tor | 0.0.2:pre27 |
| torproject | tor | 0.0.3 |
| torproject | tor | 0.0.4 |
| torproject | tor | 0.0.5 |
| torproject | tor | 0.0.6 |
| torproject | tor | 0.0.6.1 |
| torproject | tor | 0.0.6.2 |
| torproject | tor | 0.0.7 |
| torproject | tor | 0.0.7.1 |
| torproject | tor | 0.0.7.2 |
| torproject | tor | 0.0.7.3 |
| torproject | tor | 0.0.8.1 |
| torproject | tor | 0.0.9.1 |
| torproject | tor | 0.0.9.2 |
| torproject | tor | 0.0.9.3 |
| torproject | tor | 0.0.9.4 |
| torproject | tor | 0.0.9.5 |
| torproject | tor | 0.0.9.6 |
| torproject | tor | 0.0.9.7 |
| torproject | tor | 0.0.9.8 |
| torproject | tor | 0.0.9.9 |
| torproject | tor | 0.0.9.10 |
| torproject | tor | 0.1.0.10 |
| torproject | tor | 0.1.0.11 |
| torproject | tor | 0.1.0.12 |
| torproject | tor | 0.1.0.13 |
| torproject | tor | 0.1.0.14 |
| torproject | tor | 0.1.0.15 |
| torproject | tor | 0.1.0.16 |
| torproject | tor | 0.1.0.17 |
| torproject | tor | 0.1.1.20 |
| torproject | tor | 0.1.1.21 |
| torproject | tor | 0.1.1.22 |
| torproject | tor | 0.1.1.23 |
| torproject | tor | 0.1.1.24 |
| torproject | tor | 0.1.1.25 |
| torproject | tor | 0.1.1.26 |
| torproject | tor | 0.1.2.13 |
| torproject | tor | 0.1.2.14 |
| torproject | tor | 0.1.2.15 |
| torproject | tor | 0.1.2.16 |
| torproject | tor | 0.1.2.17 |
| torproject | tor | 0.1.2.18 |
| torproject | tor | 0.1.2.19 |
| torproject | tor | 0.2.0.30 |
| torproject | tor | 0.2.0.31 |
| torproject | tor | 0.2.0.32 |
| torproject | tor | 0.2.0.33 |
| torproject | tor | 0.2.0.34 |
| torproject | tor | 0.2.0.35 |
| torproject | tor | 0.2.2.18 |
| torproject | tor | 0.2.2.19 |
| torproject | tor | 0.2.2.20 |
| torproject | tor | 0.2.2.21 |
| torproject | tor | 0.2.2.22 |
| torproject | tor | 0.2.2.23 |
| torproject | tor | 0.2.2.24 |
| torproject | tor | 0.2.2.25 |
| torproject | tor | 0.2.2.26 |
| torproject | tor | 0.2.2.27 |
| torproject | tor | 0.2.2.28 |
| torproject | tor | 0.2.2.29 |
| torproject | tor | 0.2.2.30 |
| torproject | tor | 0.2.2.31 |
| torproject | tor | 0.2.2.32 |
| torproject | tor | 0.2.2.33 |
| torproject | tor | 0.2.2.34 |
| torproject | tor | 0.2.2.35 |
| torproject | tor | 0.2.2.36 |
| torproject | tor | 0.2.2.37 |
| torproject | tor | 0.2.3 |
| torproject | tor | 0.2.3.13:alpha |
| torproject | tor | 0.2.3.14:alpha |
| torproject | tor | 0.2.3.15:alpha |
| torproject | tor | 0.2.3.16:alpha |
| torproject | tor | 0.2.3.17:beta |
| torproject | tor | 0.2.3.18:rc |
| torproject | tor | 0.2.3.19:rc |
| torproject | tor | 0.2.3.20:rc |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| tor |
|
References