Tor Multiple Denial of Service Vulnerabilities

Bugtraq ID:	45953
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-0490 CVE-2011-0491 CVE-2011-0492 CVE-2011-0493
Remote:	Yes
Local:	No
Published:	Jan 21 2011 12:00AM
Updated:	May 07 2015 05:19PM
Credit:	Tor
Vulnerable:	Tor Tor 0.2.2 .20-alpha Tor Tor 0.2.2 .19-alpha Tor Tor 0.2.2 .18-alpha Tor Tor 0.2.2 .17-alpha Tor Tor 0.2.2 .16-alpha Tor Tor 0.2.2 .15-alpha Tor Tor 0.2.2 .14-alpha Tor Tor 0.2.1.28 Tor Tor 0.2.1.27 Tor Tor 0.2.1.22 Tor Tor 0.2.1.21 Tor Tor 0.2.1.20 Gentoo Linux
Not Vulnerable:	Tor Tor 0.2.2 .21-alpha Tor Tor 0.2.2 Tor Tor 0.2.1.29

Tor Multiple Denial of Service Vulnerabilities

Tor is prone to multiple denial-of-service vulnerabilities.

Attackers can exploit these issues to crash the affected computer, denying service to legitimate users.

These issues affect versions prior to Tor 0.2.1.29, 0.2.2, and 0.2.2.21-alpha.

Tor Multiple Denial of Service Vulnerabilities

Attackers can use readily available tools to exploit these issues.

Tor Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Tor Multiple Denial of Service Vulnerabilities

References:

• carefully crafted cache file sizes can trigger assert (Tor)
  
• fix 0.2.2 changelog to match 0.2.1 (Tor)
  
• more size_t_ceiling fun (Tor)
  
• Possible reentrant calls to libevent from libevent logging callback (Tor)
  
• realloc should check SIZE_T_CEILING too? (Tor)
  
• Tor 0.2.1.29 is released (security patches) (Tor)
  
• Tor 0.2.1.29 is released (security patches) (Tor)
  
• Tor Homepage (Tor Project)