| Package | Affected versions | Patched versions |
|---|---|---|
| tor | ≥ 0.3.2.0, < 0.3.2.10 | 0.3.2.10 |
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free