Tor

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-08-06T20:05:12.746Z

The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted (1) vote document or (2) consensus document.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-08-06T20:05:12.799Z

Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-08-06T20:05:12.774Z

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.

Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-17T01:55:32.706Z

Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections.

Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-16T20:48:21.454Z