High severity7.5NVD Advisory· Published Jun 9, 2017· Updated Jun 17, 2026

CVE-2017-0376

Description

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Torproject/Tor2 versions
cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*range: <0.3.0.8
- (no CPE)range: <0.3.0.8
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/tor&distro=openSUSE%20Tumbleweed
Range: < 0.4.6.7-2.2

Patches

Vulnerability mechanics

References

github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcdnvdIssue TrackingPatchThird Party Advisory
www.debian.org/security/2017/dsa-3877nvdThird Party Advisory
lists.torproject.org/pipermail/tor-announce/2017-June/000131.htmlnvdMailing ListThird Party Advisory
trac.torproject.org/projects/tor/ticket/22494nvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000