Tor · Tor · CVE-2015-2929
Name of the Vulnerable Software and Affected Versions:
Tor versions prior to 0.2.4.27
Tor versions 0.2.5.x prior to 0.2.5.12
Tor versions 0.2.6.x prior to 0.2.6.7
Description:
The issue allows remote servers to cause a denial of service, resulting in an assertion failure and application exit, by utilizing a malformed Hidden Service (HS) descriptor.
Recommendations:
For Tor versions prior to 0.2.4.27, update to version 0.2.4.27 or later.
For Tor versions 0.2.5.x prior to 0.2.5.12, update to version 0.2.5.12 or later.
For Tor versions 0.2.6.x prior to 0.2.6.7, update to version 0.2.6.7 or later.