Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tor 资源管理错误漏洞
Vulnerability Description
Tor（The Onion Router）是第二代洋葱路由（onion routing）的一种实现，主要用于匿名访问互联网。 Tor 0.2.3.25之前版本中的or/relay.c中的connection_edge_process_relay_cell函数中存在漏洞。该漏洞源于程序在出现非预期的SENDME单元的情况下继续维持循环。通过RELAY_COMMAND_SENDME命令，远程攻击者利用该漏洞导致拒绝服务（内存消耗或过量的元接收率）或绕过预期的流量控制限制。
CVSS Information
N/A
Vulnerability Type
N/A