QwikSec

Security Database

CVE

CWE

Training

CVE-2012-4419

Published: Sep 14, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_GENTOO

https://trac.torproject.org/projects/tor/ticket/6690

x_refsource_CONFIRM

[oss-security] 20120912 Re: CVE id request: tor

mailing-list

x_refsource_MLIST

third-party-advisory

x_refsource_SECUNIA

[tor-talk] 20120905 Tor 0.2.3.21-rc is out

mailing-list

x_refsource_MLIST

https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes

x_refsource_CONFIRM

FEDORA-2012-14638

vendor-advisory

x_refsource_FEDORA

https://gitweb.torproject.org/tor.git/commit/62d96284f7e0f81c40d5df7e53dd7b4dfe7e56a5

x_refsource_CONFIRM

openSUSE-SU-2012:1278

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.