CVE-2012-2249: Medium severity tor project tor vulnerability
Published Feb 3, 2014
·Updated
Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a renegotiation attempt that occurs after the initiation of the V3 link protocol.
Affected Software
97 affected components
torproject Tor<=0.2.3.22
torproject Tor=0.0.2
torproject Tor=0.0.2-pre13
torproject Tor=0.0.2-pre14
torproject Tor=0.0.2-pre15
torproject Tor=0.0.2-pre16
torproject Tor=0.0.2-pre17
torproject Tor=0.0.2-pre18
torproject Tor=0.0.2-pre19
torproject Tor=0.0.2-pre20
torproject Tor=0.0.2-pre21
torproject Tor=0.0.2-pre22
torproject Tor=0.0.2-pre23
torproject Tor=0.0.2-pre24
torproject Tor=0.0.2-pre25
torproject Tor=0.0.2-pre26
torproject Tor=0.0.2-pre27
torproject Tor=0.0.3
torproject Tor=0.0.4
torproject Tor=0.0.5
torproject Tor=0.0.6
torproject Tor=0.0.6.1
torproject Tor=0.0.6.2
torproject Tor=0.0.7
torproject Tor=0.0.7.1
torproject Tor=0.0.7.2
torproject Tor=0.0.7.3
torproject Tor=0.0.8.1
torproject Tor=0.0.9.1
torproject Tor=0.0.9.2
torproject Tor=0.0.9.3
torproject Tor=0.0.9.4
torproject Tor=0.0.9.5
torproject Tor=0.0.9.6
torproject Tor=0.0.9.7
torproject Tor=0.0.9.8
torproject Tor=0.0.9.9
torproject Tor=0.0.9.10
torproject Tor=0.1.0.10
torproject Tor=0.1.0.11
torproject Tor=0.1.0.12
torproject Tor=0.1.0.13
torproject Tor=0.1.0.14
torproject Tor=0.1.0.15
torproject Tor=0.1.0.16
torproject Tor=0.1.0.17
torproject Tor=0.1.1.20
torproject Tor=0.1.1.21
torproject Tor=0.1.1.22
torproject Tor=0.1.1.23
torproject Tor=0.1.1.24
torproject Tor=0.1.1.25
torproject Tor=0.1.1.26
torproject Tor=0.1.2.13
torproject Tor=0.1.2.14
torproject Tor=0.1.2.15
torproject Tor=0.1.2.16
torproject Tor=0.1.2.17
torproject Tor=0.1.2.18
torproject Tor=0.1.2.19
torproject Tor=0.2.0.30
torproject Tor=0.2.0.31
torproject Tor=0.2.0.32
torproject Tor=0.2.0.33
torproject Tor=0.2.0.34
torproject Tor=0.2.0.35
torproject Tor=0.2.2.18
torproject Tor=0.2.2.19
torproject Tor=0.2.2.20
torproject Tor=0.2.2.21
torproject Tor=0.2.2.22
torproject Tor=0.2.2.23
torproject Tor=0.2.2.24
torproject Tor=0.2.2.25
torproject Tor=0.2.2.26
torproject Tor=0.2.2.27
torproject Tor=0.2.2.28
torproject Tor=0.2.2.29
torproject Tor=0.2.2.30
torproject Tor=0.2.2.31
torproject Tor=0.2.2.32
torproject Tor=0.2.2.33
torproject Tor=0.2.2.34
torproject Tor=0.2.2.35
torproject Tor=0.2.2.36
torproject Tor=0.2.2.37
torproject Tor=0.2.2.38
torproject Tor=0.2.3
torproject Tor=0.2.3.13-alpha
torproject Tor=0.2.3.14-alpha
torproject Tor=0.2.3.15-alpha
torproject Tor=0.2.3.16-alpha
torproject Tor=0.2.3.17-beta
torproject Tor=0.2.3.18-rc
torproject Tor=0.2.3.19-rc
torproject Tor=0.2.3.20-rc
torproject Tor=0.2.3.21-rc
Event History
Feb 3, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2249?
CVE-2012-2249 has been rated as a moderate severity vulnerability, as it can cause a denial of service by allowing a daemon exit.
2
How do I fix CVE-2012-2249?
To fix CVE-2012-2249, upgrade to the latest version of Tor that is greater than 0.2.3.22-rc.
3
What versions of Tor are affected by CVE-2012-2249?
Vulnerable versions include all versions of Tor prior to 0.2.3.23-rc.
4
What kind of attack does CVE-2012-2249 allow?
CVE-2012-2249 allows remote attackers to perform a denial of service attack through assertion failure during renegotiation.
5
Is there a workaround for CVE-2012-2249?
There are no effective workarounds for CVE-2012-2249 other than upgrading to a later version of Tor.