The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-09-14T18:00:00

Updated: 2024-08-06T20:50:18.010Z

Reserved: 2012-09-14T00:00:00

Link: CVE-2012-4922

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-09-14T18:55:04.980

Modified: 2013-08-22T03:59:11.687

Link: CVE-2012-4922

cve-icon Redhat

No data.