The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING",
"vendor_product": "debian:debian_linux"
}
]
}{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.3.0.8"
}
],
"source": [
"CPE_RANGE",
"REFERENCES"
]
}
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0376.json"
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"169923619471645570840024080106781137546",
"118249307132368276826860184878461654044",
"201811945695741061045355060240693662210",
"220950121856985389043225540812542028633"
],
"threshold": 0.9
},
"id": "CVE-2017-0376-b1e0178a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
"target": {
"file": "src/or/relay.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "265231944209601304062017688343568352049",
"length": 10122
},
"id": "CVE-2017-0376-fff4d2d1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
"target": {
"file": "src/or/relay.c",
"function": "connection_edge_process_relay_cell"
}
}
]
"2026-07-08T15:09:53Z"
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.3.0.8"
}
],
"source": "CPE_RANGE"
}