CVE-2019-8955

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.3.3.12 Tor versions 0.3.4.x prior to 0.3.4.11 Tor versions 0.3.5.x prior to 0.3.5.8 Tor versions 0.4.x prior to 0.4.0.2-alpha

Description The issue allows for remote denial of service against Tor clients and relays due to memory exhaustion in the KIST cell scheduler.

Recommendations For Tor versions prior to 0.3.3.12, update to version 0.3.3.12 or later. For Tor versions 0.3.4.x prior to 0.3.4.11, update to version 0.3.4.11 or later. For Tor versions 0.3.5.x prior to 0.3.5.8, update to version 0.3.5.8 or later. For Tor versions 0.4.x prior to 0.4.0.2-alpha, update to version 0.4.0.2-alpha or later.