PT-2020-7822
CVE-2015-2689
·
تاريخ النشر
2015-03-22
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Tor versions prior to 0.2.4.26
Tor versions 0.2.5.x prior to 0.2.5.11
Description:
The issue arises from improper handling of pending-connection resolve states during periods of high DNS load. This allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, via crafted packets.
Recommendations:
For Tor versions prior to 0.2.4.26, update to version 0.2.4.26 or later.
For Tor versions 0.2.5.x prior to 0.2.5.11, update to version 0.2.5.11 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾