CVE-2018-0491

Name of the Vulnerable Software and Affected Versions Tor versions 0.3.2.x through 0.3.2.9

Description A use-after-free issue was discovered, allowing remote attackers to cause a denial of service because the KIST implementation allows a channel to be added more than once in the pending list.

Recommendations For Tor versions 0.3.2.x through 0.3.2.9, update to version 0.3.2.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the KIST implementation to minimize the risk of exploitation.