This security release fixes several major bugfixes including an out-of-bounds read when END, TRUNCATE and TRUNCATED cells have no reason in their payload, and a null pointer dereference when receiving a CERT cell out of order.
| Vendor | Product | Versions |
|---|---|---|
| the tor project | tor | < 0.4.9.7 |