CVE-2012-3518

The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote…

published August 26, 2012

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted (1) vote document or (2) consensus document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02775 · 86.2th percentile
Published
2012-08-26T01:00Z
EPSS history
Timeline
  • 26 AUG 01:00Z
    The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote…
    cvelistv5