fkie_cve-2018-0490
Vulnerability from fkie_nvd
Published
2018-03-05 15:29
Modified
2024-11-21 03:38
Severity ?
7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.
References
security@debian.orghttps://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02915Vendor Advisory
security@debian.orghttps://trac.torproject.org/projects/tor/ticket/25074Vendor Advisory
security@debian.orghttps://www.debian.org/security/2018/dsa-4183Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02915Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://trac.torproject.org/projects/tor/ticket/25074Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2018/dsa-4183Third Party Advisory
Impacted products
Vendor Product Version
torproject tor *
torproject tor *
torproject tor 0.3.1.1
torproject tor 0.3.1.2
torproject tor 0.3.1.3
torproject tor 0.3.1.4
torproject tor 0.3.1.5
torproject tor 0.3.1.6
torproject tor 0.3.2.1
torproject tor 0.3.2.2
torproject tor 0.3.2.3
torproject tor 0.3.2.4
torproject tor 0.3.2.5
torproject tor 0.3.2.6
torproject tor 0.3.2.7
torproject tor 0.3.2.8
torproject tor 0.3.2.9
debian debian_linux 9.0


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AB5264E-06CF-490E-AF89-6B69EC87E0E6",
              "versionEndIncluding": "0.2.9.14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D374CB99-AD88-4894-BAC3-365CB784BDC5",
              "versionEndIncluding": "0.3.1.9",
              "versionStartIncluding": "0.3.1.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.1.1:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "725179F8-E402-4238-9A17-AD237145C0D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.1.2:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "B3B36195-8CE2-40CC-9701-5ECA042A395F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.1.3:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "47279FE4-FD6E-4FE6-B2BD-7D3EA20A2F11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.1.4:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "801F7D20-5525-4733-A0EB-E54D68C6B2D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.1.5:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "65B2EE3E-A8AB-46C0-8A43-E89ECC6F9E12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.1.6:rc:*:*:*:*:*:*",
              "matchCriteriaId": "11081D34-ACC7-4C62-A02A-41B1A22727B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.1:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "8726B8B1-2DA1-4A14-8786-694FDC76EB13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.2:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "2920D83F-194D-46FC-8424-8FA170E7B1A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.3:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "8C882A1F-B1E1-4512-99EF-356C1B888E5A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.4:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "269D4F0F-1A64-4BD7-8ECA-D6AEB82238FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.5:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "B221269E-646C-4539-813A-3704328D58E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.6:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "5702AFE4-DDC4-4992-B258-5D279035219F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.7:rc:*:*:*:*:*:*",
              "matchCriteriaId": "A361C8B4-37E0-4A93-9235-6D0545C0A778",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.8:rc:*:*:*:*:*:*",
              "matchCriteriaId": "D897A116-0868-404D-A395-FECFE8EAFA8E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:torproject:tor:0.3.2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "B702FB76-CAAD-4F27-B500-482FEA31154E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema en Tor en versiones anteriores a la 0.2.9.15, versiones 0.3.1.x anteriores a la 0.3.1.10 y versiones 0.3.2.x anteriores a la 0.3.2.10. La implementaci\u00f3n del subprotocolo directory-authority protocol-list permite que atacantes remotos provoquen una denegaci\u00f3n de servicio (desreferencia de puntero NULL y cierre inesperado de directory-authority) mediante un descriptor de relevo con formato err\u00f3neo que se gestiona de manera incorrecta durante la votaci\u00f3n."
    }
  ],
  "id": "CVE-2018-0490",
  "lastModified": "2024-11-21T03:38:20.493",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-03-05T15:29:00.207",
  "references": [
    {
      "source": "security@debian.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02915"
    },
    {
      "source": "security@debian.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://trac.torproject.org/projects/tor/ticket/25074"
    },
    {
      "source": "security@debian.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2018/dsa-4183"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02915"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://trac.torproject.org/projects/tor/ticket/25074"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2018/dsa-4183"
    }
  ],
  "sourceIdentifier": "security@debian.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.