CVE-2012-5573
- State
- Published
- Severity
- Not scored
- Published
- Jan 1, 2013
- Updated
- Aug 6, 2024
- Reserved
- Oct 24, 2012
Description
The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-201301-03vendor-advisory
- https://trac.torproject.org/projects/tor/ticket/6252
- https://bugs.gentoo.org/show_bug.cgi?id=444804
- 51329third-party-advisory
- https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16
- [oss-security] 20121126 Re: tor DoS via SENDME cellsmailing-list
- https://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes
- tor-sendme-dos(80289)vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=880310
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.