CVE-2012-3517

Description

References

• lists.fedoraproject.org/pipermail/package-announce/2012-September/088006.html
• lists.opensuse.org/opensuse-updates/2012-08/msg00048.html
• openwall.com/lists/oss-security/2012/08/21/6
• security.gentoo.org/glsa/glsa-201301-03.xml
• bugzilla.redhat.com/show_bug.cgi
• gitweb.torproject.org/tor.git/commit/62637fa22405278758febb1743da9af562524d4c
• lists.torproject.org/pipermail/tor-announce/2012-August/000086.html
• trac.torproject.org/projects/tor/ticket/6480 · Patch

More vulnerabilities in tor

• CVE-2012-3519MEDIUM 5.0routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might…
• CVE-2012-3518MEDIUM 5.0The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, w…
• CVE-2011-4897MEDIUM 4.3Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname val…
• CVE-2011-4896MEDIUM 4.3Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might al…
• CVE-2011-4895MEDIUM 4.3Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which make…