CVE-2011-0492

Published: 19 January 2011

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file.

Priority

Status

Package	Release	Status
tor Launchpad, Ubuntu, Debian	dapper	Ignored (end of life)
	hardy	Ignored (end of life)
	karmic	Does not exist
	lucid	Does not exist
	maverick	Does not exist
	natty	Not vulnerable (0.2.1.29-1)
	oneiric	Not vulnerable (0.2.1.29-1)
	upstream	Released (0.2.1.29)

References

http://blog.torproject.org/blog/tor-02129-released-security-patches
https://www.cve.org/CVERecord?id=CVE-2011-0492
NVD
Launchpad
Debian

Bugs

https://trac.torproject.org/projects/tor/ticket/2326

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›