CVE-2020-10593

Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004

published March 23, 2020

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02339 · 83.5th percentile
Published
2020-03-23T12:22Z
EPSS history
Timeline
  • 23 MAR 12:22Z
    Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004
    cvelistv5