CVE-2021-28089
19.03.2021, 05:15
Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001.Enginsight
| Vendor | Product | Version |
|---|---|---|
| torproject | tor | 𝑥 < 0.3.5.14 |
| torproject | tor | 0.4.4.4 ≤ 𝑥 < 0.4.4.8 |
| torproject | tor | 0.4.5.0 ≤ 𝑥 < 0.4.5.7 |
| torproject | tor | 0.4.4.0:alpha |
| torproject | tor | 0.4.4.1:alpha |
| torproject | tor | 0.4.4.2:alpha |
| torproject | tor | 0.4.4.3:alpha |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| tor |
|
References