Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qc3c-vmf8-hgcj

Опубликовано: 18 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 3.7

Описание

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component.

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component.

EPSS

Процентиль: 26%
0.0009
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 3.7
ubuntu
5 месяцев назад

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component.

CVSS3: 3.7
nvd
5 месяцев назад

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component.

CVSS3: 3.7
debian
5 месяцев назад

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Im ...

EPSS

Процентиль: 26%
0.0009
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-400