CVE-2019-8955
EUVD-2019-1834221.02.2019, 23:29
In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| torproject | tor | 𝑥 < 0.3.3.12 |
| torproject | tor | 0.3.4.8 ≤ 𝑥 < 0.3.4.11 |
| torproject | tor | 0.3.4.0:alpha-dev |
| torproject | tor | 0.3.4.1:alpha |
| torproject | tor | 0.3.4.2:alpha |
| torproject | tor | 0.3.4.3:alpha |
| torproject | tor | 0.3.4.4:rc |
| torproject | tor | 0.3.4.5:rc |
| torproject | tor | 0.3.4.6:rc |
| torproject | tor | 0.3.4.7:rc |
| torproject | tor | 0.3.5.0:alpha-dev |
| torproject | tor | 0.3.5.1:alpha |
| torproject | tor | 0.3.5.2:alpha |
| torproject | tor | 0.3.5.3:alpha |
| torproject | tor | 0.3.5.4:alpha |
| torproject | tor | 0.3.5.5:alpha |
| torproject | tor | 0.3.5.6:rc |
| torproject | tor | 0.3.5.7 |
| torproject | tor | 0.4.0.1:alpha |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References