{"id":"CVE-2020-10593","aliases":["ALPINE-CVE-2020-10593","DEBIAN-CVE-2020-10593","EUVD-2020-3043","GHSA-v9h5-mm27-9j99","MGASA-2020-0165","UBUNTU-CVE-2020-10593","openSUSE-SU-2020:0406-1","openSUSE-SU-2020:0428-1","openSUSE-SU-2020:1970-1","openSUSE-SU-2024:11469-1"],"status":"published","title":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02339,"percentile":0.83822,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2020-03-23T12:22:03Z","modified":"2026-11-03T06:32:35Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"tor","fixed_in":["0.3.5.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"tor","fixed_in":["0.4.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tor","fixed_in":["0.4.2.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tor","fixed_in":["0.4.2.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tor","fixed_in":["0.4.2.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tor","fixed_in":["0.4.2.7-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.3.5.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.5"},{"fixed":"0.4.2.7-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2.7-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.5.10-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.5.10-lp151.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.5.10-bp151.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4.6-bp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4.6-bp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4.6-bp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4.6-bp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4.6-bp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.6.7-2.2"}]}],"bundled":22}],"products":[{"vendor":"opensuse","product":"backports_sle"},{"vendor":"opensuse","product":"leap"},{"vendor":"torproject","product":"tor"}],"references":[{"url":"https://trac.torproject.org/projects/tor/ticket/33619","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://security.gentoo.org/glsa/202003-50","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00045.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00052.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10593"},{"url":"https://github.com/advisories/GHSA-v9h5-mm27-9j99"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-10593","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10593","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0165.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26356","tags":["report"]},{"url":"https://blog.torproject.org/node/1855","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-10593","tags":["report"]},{"url":"https://blog.torproject.org/new-releases-03510-0419-0427","tags":["report"]},{"url":"https://bugs.torproject.org/33619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10593","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C4XUM5WZO5D6QSGV7SGVC32SRPG2TB56/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1167013","tags":["report"]},{"url":"https://bugzilla.suse.com/1167014","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10593","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P66MTGQU7DD4YK5V5CBW475VUBTOMUF7/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LICIVWVPYBVUILMW5J4DEG6B67OGC45P/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164275","tags":["report"]},{"url":"https://bugzilla.suse.com/1173979","tags":["report"]},{"url":"https://bugzilla.suse.com/1178741","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15572","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38385","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-10593","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"published","published":"2020-03-23T12:22:03Z","modified":"2024-08-04T11:06:10.043Z","updated_at":"2026-11-02T14:35:47.877975Z"}],"euvd":[{"id":"EUVD-2020-3043","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"published","published":"2020-03-23T12:22:03Z","modified":"2024-08-04T11:06:10Z","updated_at":"2026-11-03T03:07:49.909738Z"}],"ghsa":[{"id":"GHSA-v9h5-mm27-9j99","title":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"published","published":"2022-05-24T17:12:13Z","modified":"2023-02-03T21:30:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:53:57.970783Z"}],"nvd":[{"id":"CVE-2020-10593","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"published","published":"2020-03-23T13:15:13.033Z","modified":"2026-06-17T02:48:03.69Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:05:56.580228Z"}],"osv":[{"id":"ALPINE-CVE-2020-10593","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"published","published":"2020-03-23T13:15:13.033Z","modified":"2026-11-03T06:32:35.845132125Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2020-10593","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"published","published":"2020-03-23T13:15:13.033Z","modified":"2026-10-24T10:31:03.085685144Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-10593","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"published","published":"2020-03-23T13:15:13.033Z","modified":"2026-10-26T12:01:12.565142407Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-10593","description":"Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.","status":"withdrawn","published":"2020-03-23T13:15:00Z","modified":"2025-07-16T08:14:49.129647Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"MGASA-2020-0165","title":"Updated tor packages fix security vulnerabilities","description":"Updated tor package fixes security vulnerabilities:\n\nTor before 0.3.5.10 allows remote attackers to cause a Denial of Service\n(CPU consumption) (CVE-2020-10592).\n\nTor before 0.3.5.10 allows remote attackers to cause a Denial of Service\n(memory leak). This occurs in circpad_setup_machine_on_circ because a\ncircuit-padding machine can be negotiated twice on the same circuit\n(CVE-2020-10593).\n","status":"published","published":"2020-04-15T10:12:14Z","modified":"2026-04-16T04:44:25.054019136Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0406-1","title":"Security update for tor","description":"This update for tor to version 0.3.5.10 fixes the following issues:\n\n- tor was updated to version 0.3.5.10:\n\n- CVE-2020-10592: Fixed a CPU consumption denial of service and \n  timing patterns (boo#1167013)\n- CVE-2020-10593: Fixed a circuit padding memory leak (boo#1167014) \n","status":"published","published":"2020-03-29T16:17:19Z","modified":"2026-02-04T03:09:47.405607Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0428-1","title":"Security update for tor","description":"This update for tor to version 0.3.5.10 fixes the following issues:\n\n- tor was updated to version 0.3.5.10:\n\n- CVE-2020-10592: Fixed a CPU consumption denial of service and \n  timing patterns (boo#1167013)\n- CVE-2020-10593: Fixed a circuit padding memory leak (boo#1167014) \n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-03-31T13:06:54Z","modified":"2026-02-04T04:06:24.554183Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:1970-1","title":"Security update for tor","description":"This update for tor fixes the following issues:\n\nUpdating tor to a newer version in the respective codestream.\n\n- tor 0.3.5.12:\n  * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741)\n  * Not affected by out-of-bound memory access (CVE-2020-15572, boo#1173979)\n  * Fix DoS defenses on bridges with a pluggable transport\n  * CVE-2020-10592: CPU consumption DoS and timing patterns (boo#1167013)\n  * CVE-2020-10593: circuit padding memory leak (boo#1167014) \n\n- tor 0.4.4.6\n  * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741)\n  * Fix a crash due to an out-of-bound memory access (CVE-2020-15572, boo#1173979)\n  * Fix logrotate to not fail when tor is stopped (boo#1164275)\n","status":"published","published":"2020-11-19T15:25:33Z","modified":"2026-02-04T03:52:07.616472Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11469-1","title":"tor-0.4.6.7-2.2 on GA media","description":"These are all security issues fixed in the tor-0.4.6.7-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:38.644616Z","updated_at":"2026-11-02T16:58:35.195147Z"}]}}