CVE-2012-3518

概要

参考情報

• lists.opensuse.org/opensuse-updates/2012-08/msg00048.html
• openwall.com/lists/oss-security/2012/08/21/6
• secunia.com/advisories/50583
• security.gentoo.org/glsa/glsa-201301-03.xml
• gitweb.torproject.org/tor.git/commit/55f635745afacefffdaafc72cc176ca7ab817546
• gitweb.torproject.org/tor.git/commit/57e35ad3d91724882c345ac709666a551a977f0f
• lists.torproject.org/pipermail/tor-announce/2012-August/000086.html
• trac.torproject.org/projects/tor/ticket/6530

tor のその他の脆弱性

• CVE-2012-3519中 5.0routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might…
• CVE-2012-3517中 5.0Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via ve…
• CVE-2011-4897中 4.3Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname val…
• CVE-2011-4896中 4.3Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might al…
• CVE-2011-4895中 4.3Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which make…