NVD

Id
46692  
Name
CVE-2012-5573  
Description
The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2013-01-01  
Modified Date
2013-08-22  
Seq
2012-5573  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233899 46692 CVE-2012-5573 [oss-security] 20121126 Re: tor DoS via SENDME cells  View
233900 46692 CVE-2012-5573 GLSA-201301-03  View
233901 46692 CVE-2012-5573 tor-sendme-dos(80289)  View
233902 46692 CVE-2012-5573 https://bugs.gentoo.org/show_bug.cgi?id=444804  View
233903 46692 CVE-2012-5573 https://bugzilla.redhat.com/show_bug.cgi?id=880310  View
233904 46692 CVE-2012-5573 https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16  View
233905 46692 CVE-2012-5573 https://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes  View
233906 46692 CVE-2012-5573 https://trac.torproject.org/projects/tor/ticket/6252  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30145 JVNDB-2012-005852 Tor の or/relay.c におけるサービス運用妨害 (DoS) の脆弱性 Tor の or/relay.c 内の connection_edge_process_relay_cell 関数は、予期しない SENDME セルを受信した場合もサーキットを維持するため、サービス運用妨害 (メモリ消費または過剰なセル受信率) 状態となる、またはフロー制御の制限を回避される脆弱性が存在します。 CVE-2012-5573 58811 CVE-2012-5573 46692 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005852.html 2012-06-28 2013-01-07 View