NULL pointer dereference in Tor - CVE-2018-0490

Vulnerability identifier: #VU12293

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-0490

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the directory-authority protocol-list subprotocol implementation due to NULL pointer dereference. A remote attacker can cause the service to crash via a misformatted relay descriptor that is mishandled during voting.

Tor
Debian Linux
Fedora
tor (Alpine package)
tor

Update to versions 0.2.9.15, 0.3.1.10 or 0.3.2.10.

tor (Alpine package) - update to 0.3.1.10-r0
tor - update to 0.2.9.15-1.el6

• https://blog.torproject.org/new-stable-tor-releases-security-fixes-and-dos-prevention-03210-03110-02...

• Debian update for tor
• NULL pointer dereference in tor (Alpine package)
• Fedora EPEL 6 update for tor