tor-0.4.6.7-2.2 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:11469 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z tor-0.4.6.7-2.2 on GA media These are all security issues fixed in the tor-0.4.6.7-2.2 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-11469 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:11469 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2016-1254/ SUSE CVE CVE-2016-1254 page https://www.suse.com/security/cve/CVE-2017-0375/ SUSE CVE CVE-2017-0375 page https://www.suse.com/security/cve/CVE-2017-0376/ SUSE CVE CVE-2017-0376 page https://www.suse.com/security/cve/CVE-2017-0377/ SUSE CVE CVE-2017-0377 page https://www.suse.com/security/cve/CVE-2017-0380/ SUSE CVE CVE-2017-0380 page https://www.suse.com/security/cve/CVE-2017-8819/ SUSE CVE CVE-2017-8819 page https://www.suse.com/security/cve/CVE-2017-8820/ SUSE CVE CVE-2017-8820 page https://www.suse.com/security/cve/CVE-2017-8821/ SUSE CVE CVE-2017-8821 page https://www.suse.com/security/cve/CVE-2017-8822/ SUSE CVE CVE-2017-8822 page https://www.suse.com/security/cve/CVE-2017-8823/ SUSE CVE CVE-2017-8823 page https://www.suse.com/security/cve/CVE-2018-0490/ SUSE CVE CVE-2018-0490 page https://www.suse.com/security/cve/CVE-2018-0491/ SUSE CVE CVE-2018-0491 page https://www.suse.com/security/cve/CVE-2019-8955/ SUSE CVE CVE-2019-8955 page https://www.suse.com/security/cve/CVE-2020-10592/ SUSE CVE CVE-2020-10592 page https://www.suse.com/security/cve/CVE-2020-10593/ SUSE CVE CVE-2020-10593 page https://www.suse.com/security/cve/CVE-2020-15572/ SUSE CVE CVE-2020-15572 page https://www.suse.com/security/cve/CVE-2021-28089/ SUSE CVE CVE-2021-28089 page https://www.suse.com/security/cve/CVE-2021-28090/ SUSE CVE CVE-2021-28090 page https://www.suse.com/security/cve/CVE-2021-34548/ SUSE CVE CVE-2021-34548 page https://www.suse.com/security/cve/CVE-2021-34549/ SUSE CVE CVE-2021-34549 page https://www.suse.com/security/cve/CVE-2021-34550/ SUSE CVE CVE-2021-34550 page https://www.suse.com/security/cve/CVE-2021-38385/ SUSE CVE CVE-2021-38385 page openSUSE Tumbleweed tor-0.4.6.7-2.2 tor-0.4.6.7-2.2 as a component of openSUSE Tumbleweed Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor. CVE-2016-1254 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-1254.html CVE-2016-1254 https://bugzilla.suse.com/1016343 SUSE Bug 1016343 The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell. CVE-2017-0375 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-0375.html CVE-2017-0375 https://bugzilla.suse.com/1043455 SUSE Bug 1043455 The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit. CVE-2017-0376 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-0376.html CVE-2017-0376 https://bugzilla.suse.com/1043456 SUSE Bug 1043456 Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families. CVE-2017-0377 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-0377.html CVE-2017-0377 https://bugzilla.suse.com/1046845 SUSE Bug 1046845 The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit. CVE-2017-0380 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-0380.html CVE-2017-0380 https://bugzilla.suse.com/1059194 SUSE Bug 1059194 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue. CVE-2017-8819 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-8819.html CVE-2017-8819 https://bugzilla.suse.com/1070849 SUSE Bug 1070849 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers can cause a denial of service (NULL pointer dereference and application crash) against directory authorities via a malformed descriptor, aka TROVE-2017-010. CVE-2017-8820 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-8820.html CVE-2017-8820 https://bugzilla.suse.com/1070849 SUSE Bug 1070849 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an attacker can cause a denial of service (application hang) via crafted PEM input that signifies a public key requiring a password, which triggers an attempt by the OpenSSL library to ask the user for the password, aka TROVE-2017-011. CVE-2017-8821 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-8821.html CVE-2017-8821 https://bugzilla.suse.com/1070849 SUSE Bug 1070849 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012. CVE-2017-8822 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-8822.html CVE-2017-8822 https://bugzilla.suse.com/1070849 SUSE Bug 1070849 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013. CVE-2017-8823 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-8823.html CVE-2017-8823 https://bugzilla.suse.com/1070849 SUSE Bug 1070849 An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting. CVE-2018-0490 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-0490.html CVE-2018-0490 https://bugzilla.suse.com/1083845 SUSE Bug 1083845 A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list. CVE-2018-0491 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-0491.html CVE-2018-0491 https://bugzilla.suse.com/1083846 SUSE Bug 1083846 In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler. CVE-2019-8955 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-8955.html CVE-2019-8955 https://bugzilla.suse.com/1126340 SUSE Bug 1126340 Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002. CVE-2020-10592 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-10592.html CVE-2020-10592 https://bugzilla.suse.com/1167013 SUSE Bug 1167013 Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit. CVE-2020-10593 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-10593.html CVE-2020-10593 https://bugzilla.suse.com/1167014 SUSE Bug 1167014 Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to use Mozilla Network Security Services (NSS), aka TROVE-2020-001. CVE-2020-15572 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-15572.html CVE-2020-15572 https://bugzilla.suse.com/1173979 SUSE Bug 1173979 Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001. CVE-2021-28089 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-28089.html CVE-2021-28089 https://bugzilla.suse.com/1183726 SUSE Bug 1183726 https://bugzilla.suse.com/1184261 SUSE Bug 1184261 Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an assertion failure, aka TROVE-2021-002. CVE-2021-28090 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-28090.html CVE-2021-28090 https://bugzilla.suse.com/1183726 SUSE Bug 1183726 https://bugzilla.suse.com/1184261 SUSE Bug 1184261 An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream. CVE-2021-34548 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-34548.html CVE-2021-34548 https://bugzilla.suse.com/1187322 SUSE Bug 1187322 An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data. Consequently. an attacker can trigger the use of an attacker-chosen circuit ID to cause algorithm inefficiency. CVE-2021-34549 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-34549.html CVE-2021-34549 https://bugzilla.suse.com/1187324 SUSE Bug 1187324 An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor CVE-2021-34550 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-34550.html CVE-2021-34550 https://bugzilla.suse.com/1187325 SUSE Bug 1187325 Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007. CVE-2021-38385 openSUSE Tumbleweed:tor-0.4.6.7-2.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-38385.html CVE-2021-38385 https://bugzilla.suse.com/1189489 SUSE Bug 1189489