CVE-2021-34550

Summary

CVE	CVE-2021-34550
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-06-29 12:15:00 UTC
Updated	2021-09-20 18:53:00 UTC
Description	An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor

Risk And Classification

Problem Types: CWE-119

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Torproject	Tor	All	All	All	All

References

Reference	Source	Link	Tags
Tor: Multiple vulnerabilities (GLSA 202107-25) — Gentoo security	GENTOO	security.gentoo.org
New stable security releases: 0.3.5.15, 0.4.4.9, 0.4.5.9, 0.4.6.5 \| Tor Blog	CONFIRM	blog.torproject.org
Not Found	MISC	gitlab.torproject.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

178676 Debian Security Update for tor (DSA 4932-1)
179647 Debian Security Update for tor (CVE-2021-34550)
281659 Fedora Security Update for tor (FEDORA-2021-ff4ad9825a)
281660 Fedora Security Update for tor (FEDORA-2021-1b60c984e5)
501260 Alpine Linux Security Update for tor
710051 Gentoo Linux Tor Multiple vulnerabilities (GLSA 202107-25)
750726 OpenSUSE Security Update for tor (openSUSE-SU-2021:0926-1)