Remote Yes

Type Arbitrary code execution

Description

A use-after-free vulnerability has been found in Tor before 0.3.1.9, leading to a crash of v2 Tor onion services when they failed to open circuits while expiring introduction points.

AVG-539 tor 0.3.1.8-1 0.3.1.9-1 High Fixed

16 Dec 2017 ASA-201712-10 AVG-539 tor High multiple issues

https://trac.torproject.org/projects/tor/ticket/24313