CVE-2015-2929

The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and application exit) via a malformed HS descriptor.

Score

CVSS 3.1 7.5 High

Status

Modified - security@debian.org

Published

2020-01-24

Last modified

2024-08-06

Affected products

• Tor (The Tor Project)
• Tor (Torproject)

References

• http://openwall.com/lists/oss-security/2015/04/06/5
• https://trac.torproject.org/projects/tor/ticket/15601