CVE:CVE-2019-8955
CNNVD:CNNVD-201902-825
The Onion Router（Tor）是一款Onion Routing的实现。该产品主要用于匿名访问互联网。
Tor中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务或延迟（内存耗尽）。以下版本受到影响：Tor 0.3.3.12之前版本，0.3.4.11之前的0.3.4.x版本，0.3.5.8之前的0.3.5.x版本，0.4.0.2-alpha之前的0.4.x版本。
solution:Upgrade torproject tor to a higher version than 0.3.3.12,0.3.4.11,0.3.4.0:alpha-dev,0.3.4.1:alpha,0.3.4.2:alpha,0.3.4.3:alpha,0.3.4.4:rc,0.3.4.5:rc,0.3.4.6:rc,0.3.4.7:rc,0.3.5.0:alpha-dev,0.3.5.1:alpha,0.3.5.2:alpha,0.3.5.3:alpha,0.3.5.4:alpha,0.3.5.5:alpha,0.3.5.6:rc,0.3.5.7,0.4.0.1:alpha,and avoid the version (,0.3.3.12),[0.3.4.8,0.3.4.11),0.3.4.0:alpha-dev,0.3.4.1:alpha,0.3.4.2:alpha,0.3.4.3:alpha,0.3.4.4:rc,0.3.4.5:rc,0.3.4.6:rc,0.3.4.7:rc,0.3.5.0:alpha-dev,0.3.5.1:alpha,0.3.5.2:alpha,0.3.5.3:alpha,0.3.5.4:alpha,0.3.5.5:alpha,0.3.5.6:rc,0.3.5.7,0.4.0.1:alpha