Tor CVE-2019-8955 Remote Denial of Service Vulnerability

Bugtraq ID:	107136
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-8955
Remote:	Yes
Local:	No
Published:	Feb 21 2019 12:00AM
Updated:	Feb 21 2019 12:00AM
Credit:	nickm
Vulnerable:	Tor Project Tor 3.5.7 Tor Project Tor 3.5.6 Tor Project Tor 0.3.5.0 Tor Project Tor 0.3.4.10 Tor Project Tor 0.3.4.0 Tor Project Tor 0.3.3.11 Tor Project Tor 0.3.2.9 Tor Project Tor 0.3.2.10 Tor Project Tor 0.3.2.0 Tor Project Tor 0.3.1.9 Tor Project Tor 0.3.1.7 Tor Project Tor 0.3.1.10 Tor Project Tor 0.3.1.0 Tor Project Tor 0.3.0.11 Tor Project Tor 0.3.0.10 Tor Project Tor 0.3.0.0 Tor Project Tor 0.2.9.15 Tor Project Tor 0.2.9.14 Tor Project Tor 0.2.9.12 Tor Project Tor 0.2.9.11 Tor Project Tor 0.2.9.0 Tor Project Tor 0.2.8.9 Tor Project Tor 0.2.8.8 Tor Project Tor 0.2.8.15 Tor Project Tor 0.2.8.14
Not Vulnerable:	Tor Project Tor 0.4.0.2-alpha Tor Project Tor 0.3.5.8 Tor Project Tor 0.3.4.11 Tor Project Tor 0.3.3.12

Tor CVE-2019-8955 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Tor CVE-2019-8955 Remote Denial of Service Vulnerability

References:

• Tor Homepage (Tor Project)
  
• Fix TROVE-2019-001 (KIST can write above outbuf highwater mark) (Tor Project)
  
• New Releases: Tor 0.4.0.2-alpha, 0.3.5.8, 0.3.4.11, and 0.3.3.12 (Tor Project)