The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connectionedgeprocessrelaycell function via a BEGIN_DIR cell on a rendezvous circuit.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0376.json"
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"169923619471645570840024080106781137546",
"118249307132368276826860184878461654044",
"201811945695741061045355060240693662210",
"220950121856985389043225540812542028633"
]
},
"source": "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
"signature_type": "Line",
"id": "CVE-2017-0376-b1e0178a",
"target": {
"file": "src/or/relay.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "265231944209601304062017688343568352049",
"length": 10122.0
},
"source": "https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd",
"signature_type": "Function",
"id": "CVE-2017-0376-fff4d2d1",
"target": {
"file": "src/or/relay.c",
"function": "connection_edge_process_relay_cell"
}
}
]
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
}
]