The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connectionedgeprocessrelaycell function via a BEGIN_DIR cell on a rendezvous circuit.
{
"unresolved_ranges": [
{
"source": "CPE_STRING",
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
]
}
]
}{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"source": [
"CPE_RANGE",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.3.0.8"
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0376.json"
"2026-07-08T15:09:53Z"
[
{
"signature_version": "v1",
"source": "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
"id": "CVE-2017-0376-b1e0178a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"169923619471645570840024080106781137546",
"118249307132368276826860184878461654044",
"201811945695741061045355060240693662210",
"220950121856985389043225540812542028633"
]
},
"target": {
"file": "src/or/relay.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
"id": "CVE-2017-0376-fff4d2d1",
"digest": {
"length": 10122.0,
"function_hash": "265231944209601304062017688343568352049"
},
"target": {
"function": "connection_edge_process_relay_cell",
"file": "src/or/relay.c"
},
"deprecated": false,
"signature_type": "Function"
}
]
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.3.0.8"
}
]
}