tocsin

Debian/tor: unknown

Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests.

Action: Upgrade tor to 0.2.3.20-rc-1 or later.

Affected

introducedfixedlast affected
00.2.3.20-rc-1-

Fixed versions

0.2.3.20-rc-1

Sources

published · modified · JSON