The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade tor | May 24, 2018 | Mar 5, 2018 |
| Debian | — | Upgrade tor | Apr 29, 2018 | Mar 5, 2018 |
| Suse | — | Upgrade tor | Mar 10, 2018 | Mar 5, 2018 |
| Ubuntu | — | Upgrade tor | Nov 19, 2024 | Mar 5, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub