A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The
    directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of
    service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that
    is mishandled during voting. (CVE-2018-0490)

  - A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause
    a denial of service (relay crash) because the KIST implementation allows a channel to be added more than
    once in the pending list. (CVE-2018-0491)

This update for tor to version 0.3.2.10 fixes security issues and bugs.

The following vulnerabilities were fixed :

  - CVE-2018-0490: remote crash vulnerability against     directory authorities (boo#1083845, TROVE-2018-001)

  - CVE-2018-0491: remote relay crash (boo#1083846,     TROVE-2018-002)

This new upstream stable version also contains a new system for improved resistance to DoS attacks against relays and various other bug fixes.

ID	Name	Product	Family	Type	Severity
407397	Alpine: multiple tor packages: security update to 0.3.2.10-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
407397	Alpine: multiple tor packages: security update to 0.3.2.10-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
107179	openSUSE Security Update : tor (openSUSE-2018-223)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2018-0491

high

Tenable Plugins

high

high

high