Tor 0.4.7.x prior to 0.4.7.8 allows a denial of service via the wedging of RTT estimation.
torproject tor