| Package | Affected versions | Patched versions |
|---|---|---|
| tor | = 0.4.4.0= 0.4.4.1> 0.4.2.0, < 0.4.2.8> 0.4.3.0, < 0.4.3.6< 0.3.5.11 | 0.4.2.80.4.3.60.3.5.11 |
Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network Security Services (NSS), aka TROVE-2020-001.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free