Vulnerability Description
The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and application exit) via a malformed HS descriptor.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Torproject | Tor | < 0.2.4.27 |
References
- http://openwall.com/lists/oss-security/2015/04/06/5Mailing ListThird Party Advisory
- https://trac.torproject.org/projects/tor/ticket/15601Vendor Advisory
- http://openwall.com/lists/oss-security/2015/04/06/5Mailing ListThird Party Advisory
- https://trac.torproject.org/projects/tor/ticket/15601Vendor Advisory
FAQ
What is CVE-2015-2929?
CVE-2015-2929 is a vulnerability with a CVSS score of 7.5 (HIGH). The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and appl...
How severe is CVE-2015-2929?
CVE-2015-2929 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-2929?
Check the references section above for vendor advisories and patch information. Affected products include: Torproject Tor.