High severity7.5NVD Advisory· Published Mar 23, 2020· Updated Jun 17, 2026
CVE-2020-10593
CVE-2020-10593
Description
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- Tor/Tordescription
- Range: <0.3.5.10, <0.4.1.9, <0.4.2.7
- osv-coords6 versionspkg:rpm/opensuse/tor&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/tor&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/tor&distro=openSUSE%20Tumbleweedpkg:rpm/suse/tor&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/tor&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/tor&distro=SUSE%20Package%20Hub%2015%20SP2
< 0.3.5.10-lp151.2.3.1+ 5 more
- (no CPE)range: < 0.3.5.10-lp151.2.3.1
- (no CPE)range: < 0.4.4.6-bp152.2.3.1
- (no CPE)range: < 0.4.6.7-2.2
- (no CPE)range: < 0.4.4.6-bp152.2.3.1
- (no CPE)range: < 0.4.4.6-bp152.2.3.1
- (no CPE)range: < 0.4.4.6-bp152.2.3.1
Patches
Vulnerability mechanics
References
4- lists.opensuse.org/opensuse-security-announce/2020-03/msg00045.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-03/msg00052.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/202003-50nvdThird Party Advisory
- trac.torproject.org/projects/tor/ticket/33619nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.