CVE-2021-38385 - log back

CVE-2021-38385 edited at 22 Aug 2021 14:39:37
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
Description
+ A remote denial of service issue has been fixed in tor >= 0.4.6.7. An assertion failure could be caused by a behavior mismatch between the batch-signature verification code and the single-signature verification code. This assertion failure could be triggered remotely, leading to a denial of service attack.
References
+ https://gitlab.torproject.org/tpo/core/tor/-/issues/40078
Notes
CVE-2021-38385 created at 22 Aug 2021 14:38:01