3030 matches found
MGASA-2021-0180 Updated tor packages fix security vulnerabilities
The dumpdesc function that we used to dump unparseable information to disk, was called incorrectly in several places, in a way that could lead to excessive CPU usage CVE-2021-28089. A bug in appending detached signatures to a pending consensus document could be used to crash a directory authority...
Updated tor packages fix security vulnerabilities
The dumpdesc function that we used to dump unparseable information to disk, was called incorrectly in several places, in a way that could lead to excessive CPU usage CVE-2021-28089. A bug in appending detached signatures to a pending consensus document could be used to crash a directory authority...
Watch Out! Mission Critical SAP Applications Are Under Active Attack
Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research. "Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common securit...
The vulnerability of the `dirvote_add_signatures_to_pending_consensus()` function in the Tor browser, related to the lack of use of the `assert()` function, allows a violator to trigger a service failure.
The vulnerability of the dirvoteaddsignaturestopendingconsensus function in the Tor browser is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure remotely...
The vulnerability of the dump_desc() function in the Tor browser, which allows a hacker to trigger a service failure
The vulnerability of the dumpdesc function in the Tor browser is related to a bug in the resource consumption control mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Fedora 32 : tor (2021-7cd0c1fb70)
The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-7cd0c1fb70 advisory. - update to latest upstream release with security fixes! FEDORA-2021-7cd0c1fb70 Note that Nessus has not tested for this issue but has instead relied only on...
OPENSUSE-SU-2021:0474-1 Security update for tor
This update for tor fixes the following issues: tor was updated to 0.4.5.7 https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html Fix 2 denial of service security issues boo1183726 + Disable the dumpdesc function that we used to dump unparseable information to disk...
[SECURITY] Fedora 32 Update: tor-0.4.5.7-1.fc32
The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...
Security update for tor (moderate)
openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:0474-1 Rating: moderate References: 1183726 Cross-References: CVE-2021-28089 CVE-2021-28090 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes two vulnerabilities is now available. Description:...
Fedora: Security Advisory for tor (FEDORA-2021-7cd0c1fb70)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 33 Update: tor-0.4.5.7-1.fc33
The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...
openSUSE Security Update : tor (openSUSE-2021-461)
This update for tor fixes the following issues : tor was updated to 0.4.5.7 - https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html - Fix 2 denial of service security issues boo1183726 + Disable the dumpdesc function that we used to dump unparseable information to disk...
Fedora: Security Advisory for tor (FEDORA-2021-e68317166d)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 33 : tor (2021-e68317166d)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e68317166d advisory. - Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001...
Security update for tor (moderate)
openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:0461-1 Rating: moderate References: 1183726 Cross-References: CVE-2021-28089 CVE-2021-28090 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Description: This update...
OPENSUSE-SU-2021:0461-1 Security update for tor
This update for tor fixes the following issues: tor was updated to 0.4.5.7 https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html Fix 2 denial of service security issues boo1183726 + Disable the dumpdesc function that we used to dump unparseable information to disk...
[SECURITY] Fedora 34 Update: tor-0.4.5.7-1.fc34
The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...
Fedora: Security Advisory for tor (FEDORA-2021-e219483023)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...