tor-0.2.8.11-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:10423 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z tor-0.2.8.11-1.1 on GA media These are all security issues fixed in the tor-0.2.8.11-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-10423 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:10423 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2011-0427/ SUSE CVE CVE-2011-0427 page https://www.suse.com/security/cve/CVE-2011-2768/ SUSE CVE CVE-2011-2768 page https://www.suse.com/security/cve/CVE-2011-2769/ SUSE CVE CVE-2011-2769 page https://www.suse.com/security/cve/CVE-2011-2778/ SUSE CVE CVE-2011-2778 page https://www.suse.com/security/cve/CVE-2011-4576/ SUSE CVE CVE-2011-4576 page https://www.suse.com/security/cve/CVE-2011-4894/ SUSE CVE CVE-2011-4894 page https://www.suse.com/security/cve/CVE-2011-4895/ SUSE CVE CVE-2011-4895 page https://www.suse.com/security/cve/CVE-2011-4896/ SUSE CVE CVE-2011-4896 page https://www.suse.com/security/cve/CVE-2011-4897/ SUSE CVE CVE-2011-4897 page https://www.suse.com/security/cve/CVE-2012-3517/ SUSE CVE CVE-2012-3517 page https://www.suse.com/security/cve/CVE-2012-3518/ SUSE CVE CVE-2012-3518 page https://www.suse.com/security/cve/CVE-2012-3519/ SUSE CVE CVE-2012-3519 page https://www.suse.com/security/cve/CVE-2012-4419/ SUSE CVE CVE-2012-4419 page https://www.suse.com/security/cve/CVE-2012-4922/ SUSE CVE CVE-2012-4922 page https://www.suse.com/security/cve/CVE-2012-5573/ SUSE CVE CVE-2012-5573 page https://www.suse.com/security/cve/CVE-2013-7295/ SUSE CVE CVE-2013-7295 page https://www.suse.com/security/cve/CVE-2014-0160/ SUSE CVE CVE-2014-0160 page https://www.suse.com/security/cve/CVE-2014-5117/ SUSE CVE CVE-2014-5117 page https://www.suse.com/security/cve/CVE-2015-2688/ SUSE CVE CVE-2015-2688 page https://www.suse.com/security/cve/CVE-2015-2689/ SUSE CVE CVE-2015-2689 page https://www.suse.com/security/cve/CVE-2015-2928/ SUSE CVE CVE-2015-2928 page https://www.suse.com/security/cve/CVE-2015-2929/ SUSE CVE CVE-2015-2929 page openSUSE Tumbleweed tor-0.2.8.11-1.1 tor-0.2.8.11-1.1 as a component of openSUSE Tumbleweed Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. CVE-2011-0427 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-0427.html CVE-2011-0427 Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected. CVE-2011-2768 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-2768.html CVE-2011-2768 Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values. CVE-2011-2769 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-2769.html CVE-2011-2769 Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration. CVE-2011-2778 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-2778.html CVE-2011-2778 https://bugzilla.suse.com/739133 SUSE Bug 739133 The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer. CVE-2011-4576 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-4576.html CVE-2011-4576 https://bugzilla.suse.com/739719 SUSE Bug 739719 https://bugzilla.suse.com/758060 SUSE Bug 758060 https://bugzilla.suse.com/778825 SUSE Bug 778825 https://bugzilla.suse.com/854391 SUSE Bug 854391 Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections. CVE-2011-4894 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-4894.html CVE-2011-4894 https://bugzilla.suse.com/739133 SUSE Bug 739133 Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building. CVE-2011-4895 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-4895.html CVE-2011-4895 https://bugzilla.suse.com/739133 SUSE Bug 739133 Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port. CVE-2011-4896 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-4896.html CVE-2011-4896 https://bugzilla.suse.com/739133 SUSE Bug 739133 Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value. CVE-2011-4897 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-4897.html CVE-2011-4897 https://bugzilla.suse.com/739133 SUSE Bug 739133 Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests. CVE-2012-3517 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-3517.html CVE-2012-3517 https://bugzilla.suse.com/776642 SUSE Bug 776642 The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted (1) vote document or (2) consensus document. CVE-2012-3518 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-3518.html CVE-2012-3518 https://bugzilla.suse.com/776642 SUSE Bug 776642 routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack. CVE-2012-3519 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-3519.html CVE-2012-3519 https://bugzilla.suse.com/776642 SUSE Bug 776642 The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison. CVE-2012-4419 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-4419.html CVE-2012-4419 https://bugzilla.suse.com/780620 SUSE Bug 780620 The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419. CVE-2012-4922 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-4922.html CVE-2012-4922 https://bugzilla.suse.com/780620 SUSE Bug 780620 The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command. CVE-2012-5573 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5573.html CVE-2012-5573 https://bugzilla.suse.com/791374 SUSE Bug 791374 Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for (1) relay identity keys and (2) hidden-service identity keys, which might make it easier for remote attackers to bypass cryptographic protection mechanisms via unspecified vectors. CVE-2013-7295 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-7295.html CVE-2013-7295 https://bugzilla.suse.com/859421 SUSE Bug 859421 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug. CVE-2014-0160 openSUSE Tumbleweed:tor-0.2.8.11-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0160.html CVE-2014-0160 https://bugzilla.suse.com/872299 SUSE Bug 872299 Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY_EARLY cells as a means of communicating information about hidden service names. CVE-2014-5117 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-5117.html CVE-2014-5117 https://bugzilla.suse.com/889688 SUSE Bug 889688 buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets. CVE-2015-2688 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2688.html CVE-2015-2688 https://bugzilla.suse.com/923284 SUSE Bug 923284 Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets. CVE-2015-2689 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2689.html CVE-2015-2689 https://bugzilla.suse.com/923284 SUSE Bug 923284 The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. CVE-2015-2928 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2928.html CVE-2015-2928 https://bugzilla.suse.com/926097 SUSE Bug 926097 The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and application exit) via a malformed HS descriptor. CVE-2015-2929 openSUSE Tumbleweed:tor-0.2.8.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2929.html CVE-2015-2929 https://bugzilla.suse.com/926097 SUSE Bug 926097