8 matches found
Updated tor package fixes security vulnerabilities
This update fixes security issues: - Only accept a CONFLUXLINK cell on a plain OR circuit, and refuse to turn a pending conflux leg into an introduction or rendezvous point. Previously a client could link a rendezvous-point circuit into a conflux set and then, with a forged sequence number in the...
PT-2026-121735
This update fixes security issues: - Only accept a CONFLUX LINK cell on a plain OR circuit, and refuse to turn a pending conflux leg into an introduction or rendezvous point. Previously a client could link a rendezvous-point circuit into a conflux set and then, with a forged sequence number in th...
SUSE CVE-2009-2425
Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...
MGASA-2017-0444 Updated tor packages fix security vulnerability
When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...
DEBIAN-CVE-2009-2425
Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...
CVE-2009-2425
Tor before 0.2.0.35 allows remote attackers to cause a denial of service application crash via a malformed router descriptor...
