2 lines
6.2 KiB
JSON
2 lines
6.2 KiB
JSON
{"affected":[{"affectedData":[{"modules":["Onion Service Descriptor Handler"],"product":"Tor","vendor":"n/a","versions":[{"status":"affected","version":"0.4.7.0"},{"status":"affected","version":"0.4.7.1"},{"status":"affected","version":"0.4.7.2"},{"status":"affected","version":"0.4.7.3"},{"status":"affected","version":"0.4.7.4"},{"status":"affected","version":"0.4.7.5"},{"status":"affected","version":"0.4.7.6"},{"status":"affected","version":"0.4.7.7"},{"status":"affected","version":"0.4.7.8"},{"status":"affected","version":"0.4.7.9"},{"status":"affected","version":"0.4.7.10"},{"status":"affected","version":"0.4.7.11"},{"status":"affected","version":"0.4.7.12"},{"status":"affected","version":"0.4.7.13"},{"status":"affected","version":"0.4.7.14"},{"status":"affected","version":"0.4.7.15"},{"status":"affected","version":"0.4.7.16"},{"status":"affected","version":"0.4.8.0"},{"status":"affected","version":"0.4.8.1"},{"status":"affected","version":"0.4.8.2"},{"status":"affected","version":"0.4.8.3"},{"status":"affected","version":"0.4.8.4"},{"status":"affected","version":"0.4.8.5"},{"status":"affected","version":"0.4.8.6"},{"status":"affected","version":"0.4.8.7"},{"status":"affected","version":"0.4.8.8"},{"status":"affected","version":"0.4.8.9"},{"status":"affected","version":"0.4.8.10"},{"status":"affected","version":"0.4.8.11"},{"status":"affected","version":"0.4.8.12"},{"status":"affected","version":"0.4.8.13"},{"status":"affected","version":"0.4.8.14"},{"status":"affected","version":"0.4.8.15"},{"status":"affected","version":"0.4.8.16"},{"status":"affected","version":"0.4.8.17"},{"status":"unaffected","version":"0.4.8.18"},{"status":"unaffected","version":"0.4.9.3-alpha"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component."},{"lang":"es","value":"Una falla de seguridad ha sido descubierta en Tor hasta la versión 0.4.7.16/0.4.8.17. Se ve afectada una función desconocida del componente Gestor de Descriptores de Servicio Onion. Realizar una manipulación provoca consumo de recursos. El ataque puede ser iniciado remotamente. La complejidad del ataque se califica como alta. La explotabilidad se considera difícil. Se recomienda actualizar a la versión 0.4.8.18 y 0.4.9.3-alpha para abordar este problema. Se recomienda actualizar el componente afectado."}],"id":"CVE-2025-4444","lastModified":"2026-10-19T16:10:00.260","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"HIGH","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":4.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"cna@vuldb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-4444","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-18T20:41:11.076671Z","version":"2.0.3"}}]},"published":"2025-09-18T14:15:49.887","references":[{"source":"cna@vuldb.com","url":"https://forum.torproject.org/t/alpha-and-stable-release-0-4-8-18-and-0-4-9-3-alpha/20578"},{"source":"cna@vuldb.com","url":"https://github.com/chunmianwang/Tordos"},{"source":"cna@vuldb.com","url":"https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes"},{"source":"cna@vuldb.com","url":"https://vuldb.com/?ctiid.324814"},{"source":"cna@vuldb.com","url":"https://vuldb.com/?id.324814"},{"source":"cna@vuldb.com","url":"https://vuldb.com/?submit.640605"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-404"}],"source":"cna@vuldb.com","type":"Secondary"}]}
|