CVE-2016-1254

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via...

7.5 HighFix available

CVE-2016-1254 is a high vulnerability (CVSS 7.5) in Torproject Tor, published December 20, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.00%, the 87th percentile. Fixed in tor 0.2.9.8-2.

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

3.00%Up 1.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Record: CVE-2016-1254
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Record: CVE-2016-1254
Updated: 2026-11-02

EUVDEUVD-2016-2353 No score

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Record: EUVD-2016-2353
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q68j-wcf9-644f 7.5

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via...

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Record: GHSA-q68j-wcf9-644f
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-119
Updated: 2026-11-02

OSV 7.5

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Record: CVE-2016-1254
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2016-1254 7.5

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Record: DEBIAN-CVE-2016-1254
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-1254 7.5

Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

Record: UBUNTU-CVE-2016-1254
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2017-0008 No score

Updated tor package fixes security vulnerability

It was discovered that Tor, a connection-based low-latency anonymous communication system, may read one byte past a buffer when parsing hidden service descriptors. This issue may enable a hostile hidden service to crash Tor clients depending on hardening options and malloc implementation (CVE-2016-1254).

Record: MGASA-2017-0008
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11469-1 No score

tor-0.4.6.7-2.2 on GA media

These are all security issues fixed in the tor-0.4.6.7-2.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11469-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`tor` Debian:12	before 0.2.9.8-2	0.2.9.8-2
`tor` Debian:13	before 0.2.9.8-2	0.2.9.8-2
`tor` Debian:14	before 0.2.9.8-2	0.2.9.8-2
`tor` Debian:7	before 0.2.4.27-3, plus listed versions 0.2.3.25-10.2.4.1-alpha-10.2.4.10-alpha-10.2.4.11-alpha-10.2.4.12-alpha-1 Show 29 moreShow less 0.2.4.12-alpha-20.2.4.13-alpha-10.2.4.14-alpha-10.2.4.15-rc-10.2.4.16-rc-10.2.4.17-rc-10.2.4.18-rc-10.2.4.19-10.2.4.2-alpha-10.2.4.20-10.2.4.21-10.2.4.22-10.2.4.22-1~bpo70+10.2.4.22-1~deb7u10.2.4.23-10.2.4.23-1~deb6u10.2.4.23-1~deb7u10.2.4.24-10.2.4.26-10.2.4.26-1~deb6u10.2.4.27-10.2.4.27-1~deb6u10.2.4.27-20.2.4.3-alpha-10.2.4.4-alpha-10.2.4.5-alpha-10.2.4.6-alpha-10.2.4.7-alpha-10.2.4.9-alpha-1	0.2.4.27-3
`tor` Debian:8	before 0.2.5.12-4, plus listed versions 0.2.5.12-10.2.5.12-20.2.5.12-3	0.2.5.12-4
`tor` Mageia:5	before 0.2.8.12-1.mga5	0.2.8.12-1.mga5
`tor` Ubuntu:14.04:LTS	before 0.2.4.27-1ubuntu0.1, plus listed versions 0.2.3.25-10.2.4.19-10.2.4.20-10.2.4.27-1build0.14.04.1	0.2.4.27-1ubuntu0.1
`tor` openSUSE:Tumbleweed	before 0.4.6.7-2.2	0.4.6.7-2.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 33 moreShow less