CVE-2012-4922

Tor <0.2.2.39, 0.2.3.x <0.2.3.22-rc - DoS

Title source: llm
STIX 2.1

Description

The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419.

References (8)

Core 8
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201301-03.xml
Various Sources x_refsource_confirm
https://trac.torproject.org/projects/tor/ticket/6811
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2012/09/12/5
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088006.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html

Scores

EPSS 0.0223
EPSS Percentile 80.7%

Details

CWE
CWE-20
Status published
Products (35)
torproject/tor 0.0.2 (16 CPE variants)
torproject/tor 0.0.3
torproject/tor 0.0.4
torproject/tor 0.0.5
torproject/tor 0.0.6
torproject/tor 0.0.6.1
torproject/tor 0.0.6.2
torproject/tor 0.0.7
torproject/tor 0.0.7.1
torproject/tor 0.0.7.2
... and 25 more
Published Sep 14, 2012
Tracked Since Feb 18, 2026