SUSE CVE-2009-2425

Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...

MGASA-2017-0444 Updated tor packages fix security vulnerability

When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...