Debian/tor: high 8.2
Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the
Action: Upgrade tor to 0.4.9.11-0+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.9.11-0+deb12u1 | - |
Fixed versions
| 0.4.9.11-0+deb12u1 |
Sources
published · modified · JSON