Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201507-02
HistoryJul 06, 2015 - 12:00 a.m.

Tor: Denial of service

2015-07-0600:00:00
Gentoo Foundation
security.gentoo.org
23

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

61.5%

JSON

Background

Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service.

Description

Tor does not handle data correctly when specifically crafted data is sent, and also fails to properly verify a descriptor provided by a hidden service directory.

Impact

A remote attacker could cause a Denial of Service condition in both a Tor client or a Tor server.

Workaround

There is no known workaround at this time.

Resolution

All Tor users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-misc/tor-0.2.6.7"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-misc/tor< 0.2.6.7UNKNOWN

Related

securityvulns 2
osv 3
archlinux 1
openvas 8
mageia 1
debian 2
nessus 8
fedora 3
prion 2
cve 2
nvd 2
cvelist 2
ubuntucve 2
debiancve 2
securityvulns
securityvulns
[SECURITY] [DSA 3216-1] tor security update
2015-04-08 00:00:00
tor DoS
2015-04-08 00:00:00
osv
osv
tor - security update
2015-04-06 00:00:00
tor - security update
2015-04-07 00:00:00
tor-0.2.8.11-1.1 on GA media
2024-06-15 00:00:00
archlinux
archlinux
tor: multiple issues
2015-04-07 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0151)
2022-01-28 00:00:00
Debian Security Advisory DSA 3216-1 (tor - security update)
2015-04-06 00:00:00
Debian: Security Advisory (DSA-3216-1)
2015-04-05 00:00:00
mageia
mageia
Updated tor packages fix security vulnerabilities
2015-04-15 12:01:28
debian
debian
[SECURITY] [DLA 187-1] tor security update
2015-04-06 22:07:41
[SECURITY] [DSA 3216-1] tor security update
2015-04-06 20:56:27
nessus
nessus
Fedora 20 : tor-0.2.5.12-1.fc20 (2015-5732)
2015-04-20 00:00:00
Fedora 21 : tor-0.2.5.12-1.fc21 (2015-5729)
2015-04-20 00:00:00
GLSA-201507-02 : Tor: Denial of Service
2015-07-07 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: tor-0.2.5.12-1.fc21
2015-04-18 09:41:15
[SECURITY] Fedora 20 Update: tor-0.2.5.12-1.fc20
2015-04-18 09:48:54
[SECURITY] Fedora 22 Update: tor-0.2.5.12-1.fc22
2015-04-21 18:39:47
prion
prion
Design/Logic Flaw
2020-01-24 18:15:00
Design/Logic Flaw
2020-01-24 18:15:00
cve
cve
CVE-2015-2928
2020-01-24 18:15:12
CVE-2015-2929
2020-01-24 18:15:12
nvd
nvd
CVE-2015-2928
2020-01-24 18:15:12
CVE-2015-2929
2020-01-24 18:15:12
cvelist
cvelist
CVE-2015-2929
2020-01-24 17:22:27
CVE-2015-2928
2020-01-24 17:22:15
ubuntucve
ubuntucve
CVE-2015-2929
2020-01-24 00:00:00
CVE-2015-2928
2020-01-24 00:00:00
debiancve
debiancve
CVE-2015-2928
2020-01-24 18:15:12
CVE-2015-2929
2020-01-24 18:15:12

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

61.5%

JSON
Related for GLSA-201507-02
securityvulns2osv3archlinux1openvas8mageia1debian2nessus8fedora3prion2cve2nvd2cvelist2ubuntucve2debiancve2