CVE-2012-3517: Tor

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests.

Affected products

• Tor Tor: up to and including 0.2.2.37

Published 2012-08-26. Last modified 2026-06-16.