Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jm5p-g55h-rwhg

Опубликовано: 20 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

EPSS

Процентиль: 33%
0.0039
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-420

Связанные уязвимости

CVSS3: 5.3
ubuntu
3 месяца назад

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

CVSS3: 5.3
nvd
3 месяца назад

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

CVSS3: 5.3
debian
3 месяца назад

Tor before 0.4.9.9 was prone to acompression bomb bypass where an atta ...

CVSS3: 9.3
altlinux
5 месяцев назад

ALT-PU-2026-15149: package `tor` update to version 0.4.9.9-alt1

EPSS

Процентиль: 33%
0.0039
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-420