CVE-2012-5573

The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.

• torproject tor (<= 0.2.3.24) • torproject tor 0.0.2 • torproject tor 0.0.3 • torproject tor 0.0.4 • torproject tor 0.0.5 • torproject tor 0.0.6 • torproject tor 0.0.6.1 • torproject tor 0.0.6.2 • torproject tor 0.0.7 • torproject tor 0.0.7.1 • torproject tor 0.0.7.2 • torproject tor 0.0.7.3 • torproject tor 0.0.8.1 • torproject tor 0.0.9.1 • torproject tor 0.0.9.2 • torproject tor 0.0.9.3 • torproject tor 0.0.9.4 • torproject tor 0.0.9.5 • torproject tor 0.0.9.6 • torproject tor 0.0.9.7 • torproject tor 0.0.9.8 • torproject tor 0.0.9.9 • torproject tor 0.0.9.10 • torproject tor 0.1.0.10 • torproject tor 0.1.0.11 • torproject tor 0.1.0.12 • torproject tor 0.1.0.13 • torproject tor 0.1.0.14 • torproject tor 0.1.0.15 • torproject tor 0.1.0.16 • torproject tor 0.1.0.17 • torproject tor 0.1.1.20 • torproject tor 0.1.1.21 • torproject tor 0.1.1.22 • torproject tor 0.1.1.23 • torproject tor 0.1.1.24 • torproject tor 0.1.1.25 • torproject tor 0.1.1.26 • torproject tor 0.1.2.13 • torproject tor 0.1.2.14 • torproject tor 0.1.2.15 • torproject tor 0.1.2.16 • torproject tor 0.1.2.17 • torproject tor 0.1.2.18 • torproject tor 0.1.2.19 • torproject tor 0.2.0.30 • torproject tor 0.2.0.31 • torproject tor 0.2.0.32 • torproject tor 0.2.0.33 • torproject tor 0.2.0.34 • torproject tor 0.2.0.35 • torproject tor 0.2.2.18 • torproject tor 0.2.2.19 • torproject tor 0.2.2.20 • torproject tor 0.2.2.21 • torproject tor 0.2.2.22 • torproject tor 0.2.2.23 • torproject tor 0.2.2.24 • torproject tor 0.2.2.25 • torproject tor 0.2.2.26 … and 24 more