| Package | Affected versions | Patched versions |
|---|---|---|
| tor | ≥ 0.4.0.0, < 0.4.4.9≥ 0.4.5.0, < 0.4.5.9≥ 0.4.6.0, < 0.4.6.5< 0.3.5.15 | 0.4.4.90.4.5.90.4.6.50.3.5.15 |
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free