Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mf5-x83c-fg2x

Опубликовано: 20 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

EPSS

Процентиль: 35%
0.00405
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-416
CWE-911

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 месяца назад

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

CVSS3: 7.5
nvd
3 месяца назад

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

CVSS3: 7.5
debian
3 месяца назад

Tor before 0.4.9.11 is prone to a use-after-free (and potential double ...

suse-cvrf
3 месяца назад

Security update for tor

CVSS3: 9
altlinux
4 месяца назад

ALT-PU-2026-10109: package `tor` update to version 0.4.9.11-alt1

EPSS

Процентиль: 35%
0.00405
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-416
CWE-911