#22962: Clarify the security severity of issues that make denial of service easier --------------------------+------------------------------------ Reporter: teor | Owner: nickm Type: task | Status: accepted Priority: Medium | Milestone: Tor: 0.3.3.x-final Component: Core Tor/Tor | Version: Severity: Normal | Resolution: Keywords: docs policy | Actual Points: Parent ID: #22948 | Points: Reviewer: | Sponsor: SponsorV --------------------------+------------------------------------
Comment (by teor): Seems sensible to me. Are we worried that memory disclosure vulnerabilities will ever de- anonymise users? Remote crashes against clients aren't in our existing list, should they be high or critical? The last sentence in the critical section should read "… any ability to regain root privileges would be critical-severity." -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22962#comment:6> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs