Upstream information

CVE-2015-2688 at MITRE

Description

buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having moderate severity.

SUSE Bugzilla entry: 923284 [RESOLVED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 13.1
  • tor >= 0.2.4.26-5.26.1
  • tor-debuginfo >= 0.2.4.26-5.26.1
  • tor-debugsource >= 0.2.4.26-5.26.1
Patchnames:
openSUSE-2015-261
openSUSE Tumbleweed
  • tor >= 0.2.8.11-1.1
Patchnames:
openSUSE Tumbleweed GA tor