5

CVE-2012-4922

The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Torproject ≫ Tor Version <= 0.2.2.38
Torproject ≫ Tor Version0.0.2
Torproject ≫ Tor Version0.0.2 Updatepre13
Torproject ≫ Tor Version0.0.2 Updatepre14
Torproject ≫ Tor Version0.0.2 Updatepre15
Torproject ≫ Tor Version0.0.2 Updatepre16
Torproject ≫ Tor Version0.0.2 Updatepre17
Torproject ≫ Tor Version0.0.2 Updatepre18
Torproject ≫ Tor Version0.0.2 Updatepre19
Torproject ≫ Tor Version0.0.2 Updatepre20
Torproject ≫ Tor Version0.0.2 Updatepre21
Torproject ≫ Tor Version0.0.2 Updatepre22
Torproject ≫ Tor Version0.0.2 Updatepre23
Torproject ≫ Tor Version0.0.2 Updatepre24
Torproject ≫ Tor Version0.0.2 Updatepre25
Torproject ≫ Tor Version0.0.2 Updatepre26
Torproject ≫ Tor Version0.0.2 Updatepre27
Torproject ≫ Tor Version0.0.3
Torproject ≫ Tor Version0.0.4
Torproject ≫ Tor Version0.0.5
Torproject ≫ Tor Version0.0.6
Torproject ≫ Tor Version0.0.6.1
Torproject ≫ Tor Version0.0.6.2
Torproject ≫ Tor Version0.0.7
Torproject ≫ Tor Version0.0.7.1
Torproject ≫ Tor Version0.0.7.2
Torproject ≫ Tor Version0.0.7.3
Torproject ≫ Tor Version0.0.8.1
Torproject ≫ Tor Version0.0.9.1
Torproject ≫ Tor Version0.0.9.2
Torproject ≫ Tor Version0.0.9.3
Torproject ≫ Tor Version0.0.9.4
Torproject ≫ Tor Version0.0.9.5
Torproject ≫ Tor Version0.0.9.6
Torproject ≫ Tor Version0.0.9.7
Torproject ≫ Tor Version0.0.9.8
Torproject ≫ Tor Version0.0.9.9
Torproject ≫ Tor Version0.0.9.10
Torproject ≫ Tor Version0.1.0.10
Torproject ≫ Tor Version0.1.0.11
Torproject ≫ Tor Version0.1.0.12
Torproject ≫ Tor Version0.1.0.13
Torproject ≫ Tor Version0.1.0.14
Torproject ≫ Tor Version0.1.0.15
Torproject ≫ Tor Version0.1.0.16
Torproject ≫ Tor Version0.1.0.17
Torproject ≫ Tor Version0.1.1.20
Torproject ≫ Tor Version0.1.1.21
Torproject ≫ Tor Version0.1.1.22
Torproject ≫ Tor Version0.1.1.23
Torproject ≫ Tor Version0.1.1.24
Torproject ≫ Tor Version0.1.1.25
Torproject ≫ Tor Version0.1.1.26
Torproject ≫ Tor Version0.1.2.13
Torproject ≫ Tor Version0.1.2.14
Torproject ≫ Tor Version0.1.2.15
Torproject ≫ Tor Version0.1.2.16
Torproject ≫ Tor Version0.1.2.17
Torproject ≫ Tor Version0.1.2.18
Torproject ≫ Tor Version0.1.2.19
Torproject ≫ Tor Version0.2.0.30
Torproject ≫ Tor Version0.2.0.31
Torproject ≫ Tor Version0.2.0.32
Torproject ≫ Tor Version0.2.0.33
Torproject ≫ Tor Version0.2.0.34
Torproject ≫ Tor Version0.2.0.35
Torproject ≫ Tor Version0.2.2.18
Torproject ≫ Tor Version0.2.2.19
Torproject ≫ Tor Version0.2.2.20
Torproject ≫ Tor Version0.2.2.21
Torproject ≫ Tor Version0.2.2.22
Torproject ≫ Tor Version0.2.2.23
Torproject ≫ Tor Version0.2.2.24
Torproject ≫ Tor Version0.2.2.25
Torproject ≫ Tor Version0.2.2.26
Torproject ≫ Tor Version0.2.2.27
Torproject ≫ Tor Version0.2.2.28
Torproject ≫ Tor Version0.2.2.29
Torproject ≫ Tor Version0.2.2.30
Torproject ≫ Tor Version0.2.2.31
Torproject ≫ Tor Version0.2.2.32
Torproject ≫ Tor Version0.2.2.33
Torproject ≫ Tor Version0.2.2.34
Torproject ≫ Tor Version0.2.2.35
Torproject ≫ Tor Version0.2.2.36
Torproject ≫ Tor Version0.2.2.37
Torproject ≫ Tor Version0.2.3
Torproject ≫ Tor Version0.2.3.13 Updatealpha
Torproject ≫ Tor Version0.2.3.14 Updatealpha
Torproject ≫ Tor Version0.2.3.15 Updatealpha
Torproject ≫ Tor Version0.2.3.16 Updatealpha
Torproject ≫ Tor Version0.2.3.17 Updatebeta
Torproject ≫ Tor Version0.2.3.18 Updaterc
Torproject ≫ Tor Version0.2.3.19 Updaterc
Torproject ≫ Tor Version0.2.3.20 Updaterc
Torproject ≫ Tor Version0.2.3.21 Updaterc
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.59% 0.899
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.