Описание
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.
A flaw was found in Tor. This out-of-bounds write vulnerability occurs when Tor parses a consensus or detached signature with an unexpected signature digest type. A remote attacker could exploit this to cause a denial of service for Tor directory authorities, potentially disrupting the Tor network. While the impact is minor for most Tor roles, it could be significant for directory authorities.
Отчет
This vulnerability is rated as Important severity because an unauthenticated remote attacker can trigger memory corruption that causes denial of service on systems functioning as directory authorities, potentially disrupting consensus operations. Tor is not included in supported Red Hat Enterprise Linux distributions and is only distributed through community repositories such as EPEL and Fedora. Standard relay and client installations experience minimal exposure, as the heightened operational impact specifically targets directory authorities.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Дополнительная информация
Статус:
7.5 High
CVSS3
Связанные уязвимости
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.
tor before 0.4.9.9 was prone to anout-of-bounds write when parsing a c ...
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.
ALT-PU-2026-15149: package `tor` update to version 0.4.9.9-alt1
7.5 High
CVSS3