CVE

Id
56760  
CVE No.
CVE-2012-3517  
Status
Candidate  
Description
Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests.  
Phase
Assigned (20120614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
587909 56760 CVE-2012-3517 MLIST:[oss-security] 20120821 Re: CVE Request -- Tor 0.2.2.38: Three issues  View
587910 56760 CVE-2012-3517 URL:http://openwall.com/lists/oss-security/2012/08/21/6  View
587911 56760 CVE-2012-3517 MLIST:[tor-announce] 20120819 Tor 0.2.2.38 is released  View
587912 56760 CVE-2012-3517 URL:https://lists.torproject.org/pipermail/tor-announce/2012-August/000086.html  View
587913 56760 CVE-2012-3517 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=849949  View
587914 56760 CVE-2012-3517 CONFIRM:https://gitweb.torproject.org/tor.git/commit/62637fa22405278758febb1743da9af562524d4c  View
587915 56760 CVE-2012-3517 CONFIRM:https://trac.torproject.org/projects/tor/ticket/6480  View
587916 56760 CVE-2012-3517 FEDORA:FEDORA-2012-14638  View
587917 56760 CVE-2012-3517 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088006.html  View
587918 56760 CVE-2012-3517 GENTOO:GLSA-201301-03  View
587919 56760 CVE-2012-3517 URL:http://security.gentoo.org/glsa/glsa-201301-03.xml  View
587920 56760 CVE-2012-3517 SUSE:openSUSE-SU-2012:1068  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30531 JVNDB-2012-006239 GeSHi の contrib/langwiz.php におけるクロスサイトスクリプティングの脆弱性 GeSHi の contrib/langwiz.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3522 56760 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006239.html  View