Security Advisory

CVE-2015-2689

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-24 17:46:17

Last updated 2024-08-06 05:24:37

Assigner debian

CVSS score not scored

State PUBLISHED

Description

Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets.

← Browse all CVEs View on cve.org ↗