fkie_cve-2012-5573
Vulnerability from fkie_nvd
Published
2013-01-01 12:35
Modified
2025-04-11 00:51
Severity ?
Summary
The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.
References
secalert@redhat.comhttp://openwall.com/lists/oss-security/2012/11/26/11
secalert@redhat.comhttp://secunia.com/advisories/51329
secalert@redhat.comhttp://security.gentoo.org/glsa/glsa-201301-03.xml
secalert@redhat.comhttps://bugs.gentoo.org/show_bug.cgi?id=444804
secalert@redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=880310
secalert@redhat.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/80289
secalert@redhat.comhttps://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16Patch
secalert@redhat.comhttps://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes
secalert@redhat.comhttps://trac.torproject.org/projects/tor/ticket/6252Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2012/11/26/11
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/51329
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-201301-03.xml
af854a3a-2127-422b-91ae-364da2661108https://bugs.gentoo.org/show_bug.cgi?id=444804
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=880310
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/80289
af854a3a-2127-422b-91ae-364da2661108https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16Patch
af854a3a-2127-422b-91ae-364da2661108https://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes
af854a3a-2127-422b-91ae-364da2661108https://trac.torproject.org/projects/tor/ticket/6252Vendor Advisory
Impacted products
Vendor Product Version
torproject tor *
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.2
torproject tor 0.0.3
torproject tor 0.0.4
torproject tor 0.0.5
torproject tor 0.0.6
torproject tor 0.0.6.1
torproject tor 0.0.6.2
torproject tor 0.0.7
torproject tor 0.0.7.1
torproject tor 0.0.7.2
torproject tor 0.0.7.3
torproject tor 0.0.8.1
torproject tor 0.0.9.1
torproject tor 0.0.9.2
torproject tor 0.0.9.3
torproject tor 0.0.9.4
torproject tor 0.0.9.5
torproject tor 0.0.9.6
torproject tor 0.0.9.7
torproject tor 0.0.9.8
torproject tor 0.0.9.9
torproject tor 0.0.9.10
torproject tor 0.1.0.10
torproject tor 0.1.0.11
torproject tor 0.1.0.12
torproject tor 0.1.0.13
torproject tor 0.1.0.14
torproject tor 0.1.0.15
torproject tor 0.1.0.16
torproject tor 0.1.0.17
torproject tor 0.1.1.20
torproject tor 0.1.1.21
torproject tor 0.1.1.22
torproject tor 0.1.1.23
torproject tor 0.1.1.24
torproject tor 0.1.1.25
torproject tor 0.1.1.26
torproject tor 0.1.2.13
torproject tor 0.1.2.14
torproject tor 0.1.2.15
torproject tor 0.1.2.16
torproject tor 0.1.2.17
torproject tor 0.1.2.18
torproject tor 0.1.2.19
torproject tor 0.2.0.30
torproject tor 0.2.0.31
torproject tor 0.2.0.32
torproject tor 0.2.0.33
torproject tor 0.2.0.34
torproject tor 0.2.0.35
torproject tor 0.2.2.18
torproject tor 0.2.2.19
torproject tor 0.2.2.20
torproject tor 0.2.2.21
torproject tor 0.2.2.22
torproject tor 0.2.2.23
torproject tor 0.2.2.24
torproject tor 0.2.2.25
torproject tor 0.2.2.26
torproject tor 0.2.2.27
torproject tor 0.2.2.28
torproject tor 0.2.2.29
torproject tor 0.2.2.30
torproject tor 0.2.2.31
torproject tor 0.2.2.32
torproject tor 0.2.2.33
torproject tor 0.2.2.34
torproject tor 0.2.2.35
torproject tor 0.2.2.36
torproject tor 0.2.2.37
torproject tor 0.2.2.38
torproject tor 0.2.3
torproject tor 0.2.3.13
torproject tor 0.2.3.14
torproject tor 0.2.3.15
torproject tor 0.2.3.16
torproject tor 0.2.3.17
torproject tor 0.2.3.18
torproject tor 0.2.3.19
torproject tor 0.2.3.20
torproject tor 0.2.3.21
torproject tor 0.2.3.22
torproject tor 0.2.3.23



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:torproject:tor:*:rc:*:*:*:*:*:*",
              "matchCriteriaId": "ACD84AC0-8E46-423B-A126-44C0035F478B",
              "versionEndIncluding": "0.2.3.24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "42286A56-BB47-4A3E-B092-1057311D4960",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre13:*:*:*:*:*:*",
              "matchCriteriaId": "47511223-D650-4207-9856-DE025823231A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre14:*:*:*:*:*:*",
              "matchCriteriaId": "0AD6C8F2-3050-453B-8942-A1916E3FC12B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre15:*:*:*:*:*:*",
              "matchCriteriaId": "B34E2465-7E2D-40FA-B8F7-33B057C459CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre16:*:*:*:*:*:*",
              "matchCriteriaId": "CB68EBE3-3517-4D04-8F40-7DE3A21BE9D8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre17:*:*:*:*:*:*",
              "matchCriteriaId": "A4C33393-220A-46D7-8C9F-67E5623A5F12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre18:*:*:*:*:*:*",
              "matchCriteriaId": "5519509B-B07D-4514-A404-D812DBF3239D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre19:*:*:*:*:*:*",
              "matchCriteriaId": "D65FBECD-2EA2-4779-9198-B3CA4B67A49B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre20:*:*:*:*:*:*",
              "matchCriteriaId": "CF20BBD0-CA62-4FB2-B46D-F9BBFEF452F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre21:*:*:*:*:*:*",
              "matchCriteriaId": "F2317720-AC9D-4BA5-A334-34FA389AA097",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre22:*:*:*:*:*:*",
              "matchCriteriaId": "136DB452-2322-4FC5-A195-04E561D1D49F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre23:*:*:*:*:*:*",
              "matchCriteriaId": "3D483797-8490-4625-8AF0-E6FF3C02CD72",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre24:*:*:*:*:*:*",
              "matchCriteriaId": "2341BDA5-859F-4BF4-A009-2DEB7902108B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre25:*:*:*:*:*:*",
              "matchCriteriaId": "61C72051-52C5-43EC-88BD-C9E112C08827",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre26:*:*:*:*:*:*",
              "matchCriteriaId": "8699607B-7F86-4167-8CE8-699FE8F43D21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.2:pre27:*:*:*:*:*:*",
              "matchCriteriaId": "68ADC617-824D-4D1C-BDF8-4EB19D5656B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D04E67E7-93DD-4E8F-B88C-9C8C0721CDAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D858688-5063-4D39-BF58-189333D71785",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6978370D-97D0-4C26-B050-8B2045404D03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A1F71E8-D642-4F22-B377-34F011BF9160",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA9ACB8B-8185-4581-ABE4-0D8CE3A28BE0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B37E9B4D-E5C4-44AB-834D-8B37F3029001",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB3E5A9D-4CA3-43D5-AF13-375B23891B51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5561A8E-CF13-4243-975F-3E754494C4A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F6AD9BE-352A-4ED2-97DA-4D4948F87B27",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "3234D4EE-1B3F-4835-A387-F41D76178254",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "56068ADD-8079-497B-B031-1094F1DC15B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "206353C7-8644-4F44-96CD-1FBEB39F2771",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1C578AB-95AD-4160-9319-16A1497D528C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "80CD91D9-CC8B-44AE-8FF9-056733B36E11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CD8CC62-0C9F-47C8-B686-B376F2261ECF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F74DBE38-B5F0-4FFC-9F98-7A55326A23EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "439B85D4-9DC8-447D-ACC8-EB12C43B4F3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "85A83136-AF8F-46FE-848C-37B26EDBD1ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BDE9034-B5AF-403A-8220-715347F44519",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "379069A5-CEAC-42E0-B905-39F0AF29C954",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.0.9.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "13A4435E-23A6-45F3-94B1-75219555DEDB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF0E2924-3559-419C-A033-391549D5E7E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "53E280D9-3371-4106-A0AA-ECE3AD2753F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B608EB4-FC95-48CC-A90C-D079B2446F6B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "E04B4802-C2FC-45FF-9C27-0B8E6DF8F1C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC41D6A9-B645-427F-B141-9A3ACC755FE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A28BAE2-8F08-4002-A700-AAC581CED48B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BD06667-698A-4F64-9431-727FC905C6C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BB82CEC-AAE1-4393-B307-860AFB65C277",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.1.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BDFC6E1-F7EB-4033-BB4B-58A9182694B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.1.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "45284729-472F-48FD-AC9F-707A3174ADD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.1.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B266267-98D0-4245-B455-08B2B9B69DA1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.1.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB3CD2DF-9659-4C0A-A046-9AC6E566A558",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.1.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "38A24E38-F136-41EA-A8EB-CD279EC9DE54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.1.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDF29849-516A-4731-B6ED-767B09024232",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.1.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA26D387-0326-4CD5-98B0-F67D5621D2A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.2.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "F05957B6-A8DF-4A04-8553-232101DEC9FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.2.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC17296B-23A2-427B-8D41-4BED6E22DA60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.2.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "79B573F9-9966-4D61-802A-BBE3778FD3C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.2.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5D625E1-0DA6-483E-A251-E161E6108225",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.2.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D07F398-828C-4008-BC3E-3E511339B437",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.2.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FB18F2C-1E37-48FA-9DAE-C20B9B7B80E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.1.2.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "39D81D6F-372A-41AE-B42D-2BB1C4D4AB4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.0.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "52D2C091-8D45-4AC7-93FD-BAD81F2D6D63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.0.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "3283E8DB-8238-4796-9CEB-207C6BF1E797",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.0.32:*:*:*:*:*:*:*",
              "matchCriteriaId": "9737DA01-3E58-4229-AB03-16646F703F83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.0.33:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6B2D6EF-7451-4A78-87D0-9339F3E2AB2D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.0.34:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7ECB794-8331-48E7-BCD2-B9822F9C114A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.0.35:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F293F19-E2AA-4133-B4D0-C5E1B2AF9CD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "10344C2C-3137-4D2F-99A7-7802B80DE126",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0182C38-23CC-4E54-8C3F-6AA4A3B863DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B75EC06-BF76-4CA0-B604-6324AC6FC240",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "16C53110-3FDC-4F28-9C4D-D08E14C6DB8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "729E4E08-2556-4A29-829D-318719EE734B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B138D53-A28F-43CC-91F1-6B073A2F10F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B20CCDC-94FF-4BDA-9111-E47AA8D475BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB96E018-34C5-4462-B89C-55C42C8384D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE594F43-0630-4937-A7AB-F8F9590A4167",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "66A60CAC-A278-4AA2-A89A-E00E3D3B4127",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "787E7A32-2CC4-43C1-8324-66772736F4D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "36A36AAD-FB31-4793-A64B-1FAD90654687",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5D9043C-E793-4505-9499-03B36D1F1545",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0964E57-978F-445F-BBB1-817DBA1E8517",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.32:*:*:*:*:*:*:*",
              "matchCriteriaId": "933AC26E-E1CD-4B5B-B15A-31796B4B843F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.33:*:*:*:*:*:*:*",
              "matchCriteriaId": "930D1039-AE12-41DE-BF9E-5BCB3FF396E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.34:*:*:*:*:*:*:*",
              "matchCriteriaId": "5ABBC508-673E-405E-8760-EA156C3A1B84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.35:*:*:*:*:*:*:*",
              "matchCriteriaId": "93DBADBE-A941-4253-A509-9484BAF0FB7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.36:*:*:*:*:*:*:*",
              "matchCriteriaId": "60D4C951-CA2B-44F5-97C7-C1BE4B27B0C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.37:*:*:*:*:*:*:*",
              "matchCriteriaId": "146CEE2D-5FD6-4F2F-95E2-AB9D982C1D34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.2.38:*:*:*:*:*:*:*",
              "matchCriteriaId": "70EB1D7F-0E37-43B4-86CB-3E3D91056974",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A308F86E-B64B-40CA-A880-827F5FDCFCC3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.13:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "888C8557-D3B3-43C9-9602-AA707EA20D53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.14:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "1A50B658-1049-4467-B95E-2F697F2DD8B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.15:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "D60AE56E-EE6D-4992-BD5B-5E32F5DDB385",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.16:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "695A8085-2198-4DB7-BA5B-734063FB74D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.17:beta:*:*:*:*:*:*",
              "matchCriteriaId": "35936C42-AAA8-40FC-803D-2F56D8B881BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.18:rc:*:*:*:*:*:*",
              "matchCriteriaId": "EB448439-B7C3-441F-8923-AC125324A517",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.19:rc:*:*:*:*:*:*",
              "matchCriteriaId": "9F471155-F0ED-4F73-A04C-EF39DFC9F666",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.20:rc:*:*:*:*:*:*",
              "matchCriteriaId": "D93C514A-0BCB-4BDD-84C2-6C78D346FC13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.21:rc:*:*:*:*:*:*",
              "matchCriteriaId": "5F4A9816-F5D0-42DA-9ADB-F0D2B4A08A74",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.22:rc:*:*:*:*:*:*",
              "matchCriteriaId": "6B44CB99-1F06-4042-A8AA-AB520DE38511",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.2.3.23:rc:*:*:*:*:*:*",
              "matchCriteriaId": "DBEFA4D9-67B6-474C-B92D-0BB970FE78C2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n connection_edge_process_relay_cell en o/relay.c en Tor antes de v0.2.3.25 mantiene circuitos incluso si llega una c\u00e9lula SendMe llega, lo que podr\u00eda permitir a atacantes remotos provocar una denegaci\u00f3n de servicio (consumo de memoria o la velocidad excesiva de c\u00e9lulas recepci\u00f3n) o evitar las restricciones de control de flujo a trav\u00e9s de un comando RELAY_COMMAND_SENDME."
    }
  ],
  "id": "CVE-2012-5573",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-01-01T12:35:14.617",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2012/11/26/11"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/51329"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://security.gentoo.org/glsa/glsa-201301-03.xml"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=444804"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880310"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80289"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://trac.torproject.org/projects/tor/ticket/6252"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2012/11/26/11"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/51329"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-201301-03.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=444804"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880310"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80289"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://trac.torproject.org/projects/tor/ticket/6252"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…