CVE-2012-4419

The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison.

• torproject tor (<= 0.2.2.38) • torproject tor 0.0.2 • torproject tor 0.0.3 • torproject tor 0.0.4 • torproject tor 0.0.5 • torproject tor 0.0.6 • torproject tor 0.0.6.1 • torproject tor 0.0.6.2 • torproject tor 0.0.7 • torproject tor 0.0.7.1 • torproject tor 0.0.7.2 • torproject tor 0.0.7.3 • torproject tor 0.0.8.1 • torproject tor 0.0.9.1 • torproject tor 0.0.9.2 • torproject tor 0.0.9.3 • torproject tor 0.0.9.4 • torproject tor 0.0.9.5 • torproject tor 0.0.9.6 • torproject tor 0.0.9.7 • torproject tor 0.0.9.8 • torproject tor 0.0.9.9 • torproject tor 0.0.9.10 • torproject tor 0.1.0.10 • torproject tor 0.1.0.11 • torproject tor 0.1.0.12 • torproject tor 0.1.0.13 • torproject tor 0.1.0.14 • torproject tor 0.1.0.15 • torproject tor 0.1.0.16 • torproject tor 0.1.0.17 • torproject tor 0.1.1.20 • torproject tor 0.1.1.21 • torproject tor 0.1.1.22 • torproject tor 0.1.1.23 • torproject tor 0.1.1.24 • torproject tor 0.1.1.25 • torproject tor 0.1.1.26 • torproject tor 0.1.2.13 • torproject tor 0.1.2.14 • torproject tor 0.1.2.15 • torproject tor 0.1.2.16 • torproject tor 0.1.2.17 • torproject tor 0.1.2.18 • torproject tor 0.1.2.19 • torproject tor 0.2.0.30 • torproject tor 0.2.0.31 • torproject tor 0.2.0.32 • torproject tor 0.2.0.33 • torproject tor 0.2.0.34 • torproject tor 0.2.0.35 • torproject tor 0.2.2.18 • torproject tor 0.2.2.19 • torproject tor 0.2.2.20 • torproject tor 0.2.2.21 • torproject tor 0.2.2.22 • torproject tor 0.2.2.23 • torproject tor 0.2.2.24 • torproject tor 0.2.2.25 • torproject tor 0.2.2.26 … and 20 more