CVE-2026-44603

Description

References

• forum.torproject.org/c/news/tor-release-announcement/28 · Release Notes
• gitlab.torproject.org/tpo/core/tor/-/commit/1703df3d439c83c2184e259fad1cfa19240f9c89 · Patch
• gitlab.torproject.org/tpo/core/tor/-/work_items/41245 · Broken Link
• openwall.com/lists/oss-security/2026/05/06/8 · Mailing List

tor의 다른 취약점

• CVE-2026-77642심각 9.3tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type…
• CVE-2026-77641높음 8.2tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_fro…
• CVE-2026-77640보통 5.3tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reac…
• CVE-2026-77639보통 5.3Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under…
• CVE-2026-77638심각 9.0Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersona…