5

CVE-2012-4922

The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Torproject ≫ Tor Version <= 0.2.2.38
Torproject ≫ Tor Version 0.0.2
Torproject ≫ Tor Version 0.0.2 Update pre13
Torproject ≫ Tor Version 0.0.2 Update pre14
Torproject ≫ Tor Version 0.0.2 Update pre15
Torproject ≫ Tor Version 0.0.2 Update pre16
Torproject ≫ Tor Version 0.0.2 Update pre17
Torproject ≫ Tor Version 0.0.2 Update pre18
Torproject ≫ Tor Version 0.0.2 Update pre19
Torproject ≫ Tor Version 0.0.2 Update pre20
Torproject ≫ Tor Version 0.0.2 Update pre21
Torproject ≫ Tor Version 0.0.2 Update pre22
Torproject ≫ Tor Version 0.0.2 Update pre23
Torproject ≫ Tor Version 0.0.2 Update pre24
Torproject ≫ Tor Version 0.0.2 Update pre25
Torproject ≫ Tor Version 0.0.2 Update pre26
Torproject ≫ Tor Version 0.0.2 Update pre27
Torproject ≫ Tor Version 0.0.3
Torproject ≫ Tor Version 0.0.4
Torproject ≫ Tor Version 0.0.5
Torproject ≫ Tor Version 0.0.6
Torproject ≫ Tor Version 0.0.6.1
Torproject ≫ Tor Version 0.0.6.2
Torproject ≫ Tor Version 0.0.7
Torproject ≫ Tor Version 0.0.7.1
Torproject ≫ Tor Version 0.0.7.2
Torproject ≫ Tor Version 0.0.7.3
Torproject ≫ Tor Version 0.0.8.1
Torproject ≫ Tor Version 0.0.9.1
Torproject ≫ Tor Version 0.0.9.2
Torproject ≫ Tor Version 0.0.9.3
Torproject ≫ Tor Version 0.0.9.4
Torproject ≫ Tor Version 0.0.9.5
Torproject ≫ Tor Version 0.0.9.6
Torproject ≫ Tor Version 0.0.9.7
Torproject ≫ Tor Version 0.0.9.8
Torproject ≫ Tor Version 0.0.9.9
Torproject ≫ Tor Version 0.0.9.10
Torproject ≫ Tor Version 0.1.0.10
Torproject ≫ Tor Version 0.1.0.11
Torproject ≫ Tor Version 0.1.0.12
Torproject ≫ Tor Version 0.1.0.13
Torproject ≫ Tor Version 0.1.0.14
Torproject ≫ Tor Version 0.1.0.15
Torproject ≫ Tor Version 0.1.0.16
Torproject ≫ Tor Version 0.1.0.17
Torproject ≫ Tor Version 0.1.1.20
Torproject ≫ Tor Version 0.1.1.21
Torproject ≫ Tor Version 0.1.1.22
Torproject ≫ Tor Version 0.1.1.23
Torproject ≫ Tor Version 0.1.1.24
Torproject ≫ Tor Version 0.1.1.25
Torproject ≫ Tor Version 0.1.1.26
Torproject ≫ Tor Version 0.1.2.13
Torproject ≫ Tor Version 0.1.2.14
Torproject ≫ Tor Version 0.1.2.15
Torproject ≫ Tor Version 0.1.2.16
Torproject ≫ Tor Version 0.1.2.17
Torproject ≫ Tor Version 0.1.2.18
Torproject ≫ Tor Version 0.1.2.19
Torproject ≫ Tor Version 0.2.0.30
Torproject ≫ Tor Version 0.2.0.31
Torproject ≫ Tor Version 0.2.0.32
Torproject ≫ Tor Version 0.2.0.33
Torproject ≫ Tor Version 0.2.0.34
Torproject ≫ Tor Version 0.2.0.35
Torproject ≫ Tor Version 0.2.2.18
Torproject ≫ Tor Version 0.2.2.19
Torproject ≫ Tor Version 0.2.2.20
Torproject ≫ Tor Version 0.2.2.21
Torproject ≫ Tor Version 0.2.2.22
Torproject ≫ Tor Version 0.2.2.23
Torproject ≫ Tor Version 0.2.2.24
Torproject ≫ Tor Version 0.2.2.25
Torproject ≫ Tor Version 0.2.2.26
Torproject ≫ Tor Version 0.2.2.27
Torproject ≫ Tor Version 0.2.2.28
Torproject ≫ Tor Version 0.2.2.29
Torproject ≫ Tor Version 0.2.2.30
Torproject ≫ Tor Version 0.2.2.31
Torproject ≫ Tor Version 0.2.2.32
Torproject ≫ Tor Version 0.2.2.33
Torproject ≫ Tor Version 0.2.2.34
Torproject ≫ Tor Version 0.2.2.35
Torproject ≫ Tor Version 0.2.2.36
Torproject ≫ Tor Version 0.2.2.37
Torproject ≫ Tor Version 0.2.3
Torproject ≫ Tor Version 0.2.3.13 Update alpha
Torproject ≫ Tor Version 0.2.3.14 Update alpha
Torproject ≫ Tor Version 0.2.3.15 Update alpha
Torproject ≫ Tor Version 0.2.3.16 Update alpha
Torproject ≫ Tor Version 0.2.3.17 Update beta
Torproject ≫ Tor Version 0.2.3.18 Update rc
Torproject ≫ Tor Version 0.2.3.19 Update rc
Torproject ≫ Tor Version 0.2.3.20 Update rc
Torproject ≫ Tor Version 0.2.3.21 Update rc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.23% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088006.html
http://security.gentoo.org/glsa/glsa-201301-03.xml
http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html
https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes
http://openwall.com/lists/oss-security/2012/09/12/5
https://gitweb.torproject.org/tor.git/commit/973c18bf0e84d14d8006a9ae97fde7f7fb97e404
https://lists.torproject.org/pipermail/tor-talk/2012-September/025501.html
https://trac.torproject.org/projects/tor/ticket/6811