CVE-2016-1254
Fixed in a distro release EPSS 3%
Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.
Products: torproject tor, debian_linux, fedoraproject fedora, opensuse leap, opensuse, opensuse_project leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tor | 0.2.9.8-2 |
| Debian 13 | tor | 0.2.9.8-2 |
| Debian 14 | tor | 0.2.9.8-2 |
| Debian 7 | tor | 0.2.4.27-3 |
| Debian 8 | tor | 0.2.5.12-4 |
| Ubuntu 14.04 LTS | tor | 0.2.4.27-1ubuntu0.1 |
| openSUSE Tumbleweed | tor | 0.4.6.7-2.2 |