CVE-2015-2689

Name of the Vulnerable Software and Affected Versions: Tor versions prior to 0.2.4.26 Tor versions 0.2.5.x prior to 0.2.5.11

Description: The issue arises from improper handling of pending-connection resolve states during periods of high DNS load. This allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, via crafted packets.

Recommendations: For Tor versions prior to 0.2.4.26, update to version 0.2.4.26 or later. For Tor versions 0.2.5.x prior to 0.2.5.11, update to version 0.2.5.11 or later.