| Package | Affected versions | Patched versions |
|---|---|---|
| tor | = 0.2.9.0= 0.2.9.1= 0.2.9.10= 0.2.9.11= 0.2.9.2= 0.2.9.3= 0.2.9.4= 0.2.9.5= 0.2.9.6= 0.2.9.8= 0.2.9.9= 0.3.0.0= 0.3.0.1= 0.3.0.10= 0.3.0.2= 0.3.0.3= 0.3.0.4= 0.3.0.5= 0.3.0.6= 0.3.0.7= 0.3.0.8= 0.3.0.9= 0.3.1.1= 0.3.1.2= 0.3.1.3= 0.3.1.4= 0.3.1.5= 0.3.1.6= 0.3.2≤ 0.2.8.14 |
The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free