CVE-2020-10593
Summary
| CVE | CVE-2020-10593 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-03-23 13:15:00 UTC |
|---|
| Updated | 2023-02-03 19:36:00 UTC |
|---|
| Description | Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [security-announce] openSUSE-SU-2020:0406-1: moderate: Security update f |
SUSE |
lists.opensuse.org |
|
| #33619 (Resolve TROVE-2020-004)
– Tor Bug Tracker & Wiki |
MISC |
trac.torproject.org |
Issue Tracking, Third Party Advisory |
| [security-announce] openSUSE-SU-2020:0428-1: moderate: Security update f |
SUSE |
lists.opensuse.org |
|
| Tor: Multiple vulnerabilities (GLSA 202003-50) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 501259 Alpine Linux Security Update for tor
- 750586 OpenSUSE Security Update for tor (openSUSE-SU-2020:1970-1)
