CVE-2018-0491
Publication date 5 March 2018
Last updated 25 August 2025
Ubuntu priority
Description
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| tor | ||
| 18.04 LTS bionic |
Fixed 0.3.2.10-1
|
|
| 16.04 LTS xenial |
Not affected
|
|
| 14.04 LTS trusty |
Not affected
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
7.5 · High
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H