Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-28089
7.5
HIGHCVSS v3
Published
March 19, 2021
CVSS v2
5 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001.
torproject/tor
GitHubunofficial git repo -- report bugs/issues/pull requests on https://gitlab.torproject.org/ --
GitHubunofficial git repo -- report bugs/issues/pull requests on https://gitlab.torproject.org/ --= 0.4.4.1, = 0.4.4.0, >= 0.4.5.0, < 0.4.5.7, < 0.3.5.14, = 0.4.4.2, = 0.4.4.3, >= 0.4.4.4, < 0.4.4.8NVD
Crates.io
Docker Hub
NPM
RubyGems