CVE-2015-2688

Name of the Vulnerable Software and Affected Versions: Tor versions 0.2.4.x through 0.2.4.25 Tor versions 0.2.5.x through 0.2.5.10

Description: The issue is related to the buf pullup function in Tor, which does not properly handle unexpected arrival times of buffers with invalid layouts. This allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, via crafted packets.

Recommendations: For Tor versions 0.2.4.x through 0.2.4.25, update to version 0.2.4.26 or later. For Tor versions 0.2.5.x through 0.2.5.10, update to version 0.2.5.11 or later.