Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-8955

Опубликовано: 21 фев. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*
Версия до 0.3.3.12 (исключая)
cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*
Версия от 0.3.4.8 (включая) до 0.3.4.11 (исключая)
cpe:2.3:a:torproject:tor:0.3.4.0:alpha-dev:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.4.1:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.4.2:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.4.3:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.4.4:rc:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.4.5:rc:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.4.6:rc:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.4.7:rc:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.0:alpha-dev:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.1:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.2:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.3:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.4:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.5:alpha:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.6:rc:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.3.5.7:*:*:*:*:*:*:*
cpe:2.3:a:torproject:tor:0.4.0.1:alpha:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.0193
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 7 лет назад

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.

CVSS3: 7.5
debian
почти 7 лет назад

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5. ...

suse-cvrf
почти 7 лет назад

Security update for tor

CVSS3: 7.5
github
больше 3 лет назад

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.

EPSS

Процентиль: 83%
0.0193
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770