CVE-2016-1254

Mô tả

Tham khảo

• lists.opensuse.org/opensuse-updates/2016-12/msg00154.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2016-12/msg00155.html · Third Party Advisory
• blog.torproject.org/blog/tor-02812-released · Vendor Advisory
• gitweb.torproject.org/tor.git/commit · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FXOJSMCTIOHLBRYFBVEL3CDLGPZXX6WE
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTU2R253477RZLYAJAR5DAXAON7KIVLA
• trac.torproject.org/projects/tor/ticket/21018 · Issue Tracking
• debian.org/security/2016/dsa-3741 · Third Party Advisory

Lỗ hổng khác của tor

• CVE-2026-77642NGHIÊM TRỌNG 9.3tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type…
• CVE-2026-77641CAO 8.2tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_fro…
• CVE-2026-77640TRUNG BÌNH 5.3tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reac…
• CVE-2026-77639TRUNG BÌNH 5.3Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under…
• CVE-2026-77638NGHIÊM TRỌNG 9.0Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersona…