CVE-2022-33903

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://lists.torproject.org/pipermail/tor-announce/2022-June/000242.htmlMailing List, Patch, Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2022-33903Third Party Advisory
https://security.gentoo.org/glsa/202305-11
https://lists.torproject.org/pipermail/tor-announce/2022-June/000242.htmlMailing List, Patch, Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2022-33903Third Party Advisory
https://security.gentoo.org/glsa/202305-11

Timeline

Published: Jul 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-339057.0DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU att CVE-2022-339066.4DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption throug CVE-2022-339076.4DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corrup CVE-2022-339087.0DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a T CVE-2022-339097.0DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TO CVE-2022-33914.8The Retain Live Chat WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2022-339105.4An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a CVE-2022-339115.3An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Servi CVE-2022-339127.8A permission issue affects users that deployed the shipped version of the Checkmk Debian package. Packages created by the agent bakery (ente CVE-2022-339137.5In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission ch CVE-2022-339157.0Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that co CVE-2022-339167.5OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information.