Debian/tor: medium 6.5
Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control s
Action: Upgrade tor to 0.4.9.12-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.9.12-2 | - |
Fixed versions
| 0.4.9.12-2 |
Sources
published · modified · JSON