Changes between Initial Version and Version 1 of Ticket #25251


Ignore:
Timestamp:
Mar 3, 2018, 4:26:15 PM (4 months ago)
Author:
nickm
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #25251

    • Property Status changed from assigned to closed
    • Property Resolution changed from to fixed
    • Property Summary changed from Fix TROVE-2018-004 to Fix TROVE-2018-004: bad consensus can trigger null pointer crash.
  • Ticket #25251 – Description

    initial v1  
     1When checking their own versions against the subprotocol versions listed in a consensus document, Tor instances could be made to crash if the consensus was incorrectly formatted.
     2
     3This is a low-severity bug, since it can only be exploited by corrupting a majority of directory authorities.  (And any attacker who can do that, can do far worse.)
     4
     5We're tracking this one as TROVE-2018-004.  It was present in 0.2.9.4-alpha and later.  It is fixed in 0.2.9.15, 0.3.1.10, 0.3.2.10, and 0.3.3.3-alpha.