CVE-2016-8860 in Tor
Summary
Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buf_t data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
10/19/2016
Disclosure
01/04/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95035 | Tor buffers.c memory corruption | 119 | Not defined | Official fix | CVE-2016-8860 |