CVE-2019-8955

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-8955
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8955.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-8955
Downstream
Related
Published
2019-02-21T23:29:00.267Z
Modified
2026-03-15T21:57:01.929338Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.

References

Affected packages

Git / github.com/torproject/tor

Affected ranges

Type
GIT
Repo
https://github.com/torproject/tor
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f3e21c27631ee40603c1cab01b8e6b495689b69c
Introduced
da95b91355248ad8f3a6aa6733cc6d24915f59ce
Fixed
4fd31340f3355342deebf49b586ae38bc2e9c8fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cfff582e4d68b4026d19c4cee4c2d893aaab116f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
deb8970a29ef7427c3d42182d3bacc31ab602c03
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc951e83aac770d123118bf485d14490c2539048
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e8c256ca803b09879f52a641d8143543c22ac763
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ab57cf6493f502abf7cc10bb800c0d01925bc0fc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
673f3d640ef7fb05adf8533248d1b6bbbf086436
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6045c26d8442913e936e640fcf165ebfcc9d4bf1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8465a8d84647c349d5995807b93a06f3afdd6185
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e22822e4ae75dc59c7242d84bc306476fbd92a3b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1f9055c8845920e0aad8fc0cf3fd71b19905b2cb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e62d92be5a9f1503d67d7d03e10eadcfc6be9b33
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
444e9b37c53b0246158a4fca2e4e6e732deb8799
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eca87ef7660ae0ba96b3f592e698e3f32f0c0357
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a2ecc19ab923f34cc2363fa6f8c6e8d2bf9d350b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a06093faaa65b0e0645f29c74abddcb42ac6e975
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9beb085c10562a257c08abcee43434533d4fa96e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
81f1b89efc94723f2c13b0b80d311364a2245d85
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.3.3.12"
        },
        {
            "introduced": "0.3.4.8"
        },
        {
            "fixed": "0.3.4.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.0-alpha\\-dev"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.1-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.2-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.3-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.4-rc"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.5-rc"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.6-rc"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.4.7-rc"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.0-alpha\\-dev"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.1-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.2-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.3-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.4-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.5-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.6-rc"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.5.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.4.0.1-alpha"
        }
    ]
}

Affected versions

tor-0.*
tor-0.3.4.10
tor-0.3.4.8
tor-0.3.4.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8955.json"