| عنوان | Tor ≤ 0.4.8 Memory Management vulnerability |
|---|
| الوصف | Tor Descriptor Memory Fragmentation Vulnerability allows attackers to measure the physical memory capacity of Tor nodes by exploiting descriptor uploads that reach the cache threshold and trigger cache flush events, and subsequently disable them by abusing the descriptor update mechanism to induce large amounts of not-adjacent memory fragmentation in the glibc ptmalloc allocator that Tor relies on. This attack reliably forces Tor nodes with less than 8GB of RAM into an Out-Of-Memory crash and has the potential to disable nodes with greater memory under sustained conditions. |
|---|
| المصدر | ⚠️ https://github.com/chunmianwang/Tordos |
|---|
| المستخدم | wocanmei (UID 89391) |
|---|
| ارسال | 23/08/2025 02:49 PM (1 سنة منذ) |
|---|
| الاعتدال | 18/09/2025 03:57 PM (26 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 324814 [Tor حتى 0.4.7.16/0.4.8.17 Onion Service Descriptor الحرمان من الخدمة] |
|---|
| النقاط | 20 |
|---|