Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-15572
7.5
HIGHCVSS v3
Published
July 15, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network Security Services (NSS), aka TROVE-2020-001.
torproject/tor
GitHubunofficial git repo -- report bugs/issues/pull requests on https://gitlab.torproject.org/ --
GitHubunofficial git repo -- report bugs/issues/pull requests on https://gitlab.torproject.org/ --= 0.4.4.1, = 0.4.4.0, > 0.4.3.0, < 0.4.3.6, > 0.4.2.0, < 0.4.2.8, < 0.3.5.11NVD