CVE-2007-4096: Buffer Overflow
Published Jul 30, 2007
·Updated
Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to cause a denial of service via unspecified vectors.
Affected Software
15 affected components
Tor (The Onion Router)=0.1.0.10
Tor (The Onion Router)=0.1.0.11
Tor (The Onion Router)=0.1.0.12
Tor (The Onion Router)=0.1.0.13
Tor (The Onion Router)=0.1.0.14
Tor (The Onion Router)=0.1.0.18
Tor (The Onion Router)=0.1.1.1_alpha
Tor (The Onion Router)=0.1.1.2_alpha
Tor (The Onion Router)=0.1.1.3_alpha
Tor (The Onion Router)=0.1.1.4_alpha
Tor (The Onion Router)=0.1.1.5_alpha
Tor (The Onion Router)=0.1.1.20
Tor (The Onion Router)=0.1.1.23
Tor (The Onion Router)=0.1.2.1_alpha-cvs
Tor (The Onion Router)=0.1.2.14
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jul 30, 2007
CVE Published
09:17 PM
Jul 31, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4096?
CVE-2007-4096 has a high severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2007-4096?
To fix CVE-2007-4096, upgrade to Tor version 0.1.2.15 or later.
3
What types of attacks can exploit CVE-2007-4096?
CVE-2007-4096 can be exploited through remote attacks targeting the buffer overflow vulnerability when using BSD natd support.
4
Which versions of Tor are affected by CVE-2007-4096?
Versions of Tor from 0.1.0.10 to 0.1.2.14 are affected by CVE-2007-4096.
5
Is there a workaround for CVE-2007-4096?
There are no specific workarounds for CVE-2007-4096; updating to a patched version is recommended.