CVE:CVE-2012-5573
CNNVD:CNNVD-201212-124
Tor（The Onion Router）是第二代洋葱路由（onion routing）的一种实现，主要用于匿名访问互联网。
Tor 0.2.3.25之前版本中的or/relay.c中的connection_edge_process_relay_cell函数中存在漏洞。该漏洞源于程序在出现非预期的SENDME单元的情况下继续维持循环。通过RELAY_COMMAND_SENDME命令，远程攻击者利用该漏洞导致拒绝服务（内存消耗或过量的元接收率）或绕过预期的流量控制限制。
solution:Upgrade torproject tor to a higher version than *:rc,0.0.2,0.0.2:pre13,0.0.2:pre14,0.0.2:pre15,0.0.2:pre16,0.0.2:pre17,0.0.2:pre18,0.0.2:pre19,0.0.2:pre20,0.0.2:pre21,0.0.2:pre22,0.0.2:pre23,0.0.2:pre24,0.0.2:pre25,0.0.2:pre26,0.0.2:pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8.1,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.24,0.1.1.25,0.1.1.26,0.1.2.13,0.1.2.14,0.1.2.15,0.1.2.16,0.1.2.17,0.1.2.18,0.1.2.19,0.2.0.30,0.2.0.31,0.2.0.32,0.2.0.33,0.2.0.34,0.2.0.35,0.2.2.18,0.2.2.19,0.2.2.20,0.2.2.21,0.2.2.22,0.2.2.23,0.2.2.24,0.2.2.25,0.2.2.26,0.2.2.27,0.2.2.28,0.2.2.29,0.2.2.30,0.2.2.31,0.2.2.32,0.2.2.33,0.2.2.34,0.2.2.35,0.2.2.36,0.2.2.37,0.2.2.38,0.2.3,0.2.3.13:alpha,0.2.3.14:alpha,0.2.3.15:alpha,0.2.3.16:alpha,0.2.3.17:beta,0.2.3.18:rc,0.2.3.19:rc,0.2.3.20:rc,0.2.3.21:rc,0.2.3.22:rc,0.2.3.23:rc,and avoid the version *:rc,0.0.2,0.0.2:pre13,0.0.2:pre14,0.0.2:pre15,0.0.2:pre16,0.0.2:pre17,0.0.2:pre18,0.0.2:pre19,0.0.2:pre20,0.0.2:pre21,0.0.2:pre22,0.0.2:pre23,0.0.2:pre24,0.0.2:pre25,0.0.2:pre26,0.0.2:pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8.1,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.24,0.1.1.25,0.1.1.26,0.1.2.13,0.1.2.14,0.1.2.15,0.1.2.16,0.1.2.17,0.1.2.18,0.1.2.19,0.2.0.30,0.2.0.31,0.2.0.32,0.2.0.33,0.2.0.34,0.2.0.35,0.2.2.18,0.2.2.19,0.2.2.20,0.2.2.21,0.2.2.22,0.2.2.23,0.2.2.24,0.2.2.25,0.2.2.26,0.2.2.27,0.2.2.28,0.2.2.29,0.2.2.30,0.2.2.31,0.2.2.32,0.2.2.33,0.2.2.34,0.2.2.35,0.2.2.36,0.2.2.37,0.2.2.38,0.2.3,0.2.3.13:alpha,0.2.3.14:alpha,0.2.3.15:alpha,0.2.3.16:alpha,0.2.3.17:beta,0.2.3.18:rc,0.2.3.19:rc,0.2.3.20:rc,0.2.3.21:rc,0.2.3.22:rc,0.2.3.23:rc