Approved changes feed: RSS · Atom

cpe:2.3:a:torproject:tor:0.3.2.8:rc:*:*:*:*:*:*

part: a version: 0.3.2.8 update: rc

VendorTorproject (afa7dfd2-d927-5903-8be5-17975f0a6575)
ProductTor (7218de4e-744e-5b99-80a0-16fcf16b33ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/torproject/tor purl2cpe 2026-06-01 10:12:23.433827
pkg:torproject/tor purl2cpe 2026-06-01 10:12:23.433828

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0490 vulnerable 2026-06-08 05:10:23.949587 Details available
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.
Published: 2018-03-05T15:00:00.000Z
Updated: 2024-08-05T03:28:10.607Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.