CVE:CVE-2018-0490
CNNVD:CNNVD-201803-124
Tor（The Onion Router）是第二代洋葱路由（onion routing）的一种实现，主要用于匿名访问互联网。
Tor 0.2.9.15之前版本、0.3.1.10之前的0.3.1.x版本和0.3.2.10之前的0.3.2.x版本中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务（空指针逆向引用和崩溃）。
solution:Upgrade torproject tor to a higher version than 0.2.9.14,0.3.1.9,0.3.1.1:alpha,0.3.1.2:alpha,0.3.1.3:alpha,0.3.1.4:alpha,0.3.1.5:alpha,0.3.1.6:rc,0.3.2.1:alpha,0.3.2.2:alpha,0.3.2.3:alpha,0.3.2.4:alpha,0.3.2.5:alpha,0.3.2.6:alpha,0.3.2.7:rc,0.3.2.8:rc,0.3.2.9,and avoid the version (,0.2.9.14],[0.3.1.7,0.3.1.9],0.3.1.1:alpha,0.3.1.2:alpha,0.3.1.3:alpha,0.3.1.4:alpha,0.3.1.5:alpha,0.3.1.6:rc,0.3.2.1:alpha,0.3.2.2:alpha,0.3.2.3:alpha,0.3.2.4:alpha,0.3.2.5:alpha,0.3.2.6:alpha,0.3.2.7:rc,0.3.2.8:rc,0.3.2.9; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0