CVE-2012-2250: Medium severity tor project tor vulnerability
Published Feb 3, 2014
·Updated
Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly.
Affected Software
98 affected components
torproject Tor<=0.2.3.23
torproject Tor=0.0.2
torproject Tor=0.0.2-pre13
torproject Tor=0.0.2-pre14
torproject Tor=0.0.2-pre15
torproject Tor=0.0.2-pre16
torproject Tor=0.0.2-pre17
torproject Tor=0.0.2-pre18
torproject Tor=0.0.2-pre19
torproject Tor=0.0.2-pre20
torproject Tor=0.0.2-pre21
torproject Tor=0.0.2-pre22
torproject Tor=0.0.2-pre23
torproject Tor=0.0.2-pre24
torproject Tor=0.0.2-pre25
torproject Tor=0.0.2-pre26
torproject Tor=0.0.2-pre27
torproject Tor=0.0.3
torproject Tor=0.0.4
torproject Tor=0.0.5
torproject Tor=0.0.6
torproject Tor=0.0.6.1
torproject Tor=0.0.6.2
torproject Tor=0.0.7
torproject Tor=0.0.7.1
torproject Tor=0.0.7.2
torproject Tor=0.0.7.3
torproject Tor=0.0.8.1
torproject Tor=0.0.9.1
torproject Tor=0.0.9.2
torproject Tor=0.0.9.3
torproject Tor=0.0.9.4
torproject Tor=0.0.9.5
torproject Tor=0.0.9.6
torproject Tor=0.0.9.7
torproject Tor=0.0.9.8
torproject Tor=0.0.9.9
torproject Tor=0.0.9.10
torproject Tor=0.1.0.10
torproject Tor=0.1.0.11
torproject Tor=0.1.0.12
torproject Tor=0.1.0.13
torproject Tor=0.1.0.14
torproject Tor=0.1.0.15
torproject Tor=0.1.0.16
torproject Tor=0.1.0.17
torproject Tor=0.1.1.20
torproject Tor=0.1.1.21
torproject Tor=0.1.1.22
torproject Tor=0.1.1.23
torproject Tor=0.1.1.24
torproject Tor=0.1.1.25
torproject Tor=0.1.1.26
torproject Tor=0.1.2.13
torproject Tor=0.1.2.14
torproject Tor=0.1.2.15
torproject Tor=0.1.2.16
torproject Tor=0.1.2.17
torproject Tor=0.1.2.18
torproject Tor=0.1.2.19
torproject Tor=0.2.0.30
torproject Tor=0.2.0.31
torproject Tor=0.2.0.32
torproject Tor=0.2.0.33
torproject Tor=0.2.0.34
torproject Tor=0.2.0.35
torproject Tor=0.2.2.18
torproject Tor=0.2.2.19
torproject Tor=0.2.2.20
torproject Tor=0.2.2.21
torproject Tor=0.2.2.22
torproject Tor=0.2.2.23
torproject Tor=0.2.2.24
torproject Tor=0.2.2.25
torproject Tor=0.2.2.26
torproject Tor=0.2.2.27
torproject Tor=0.2.2.28
torproject Tor=0.2.2.29
torproject Tor=0.2.2.30
torproject Tor=0.2.2.31
torproject Tor=0.2.2.32
torproject Tor=0.2.2.33
torproject Tor=0.2.2.34
torproject Tor=0.2.2.35
torproject Tor=0.2.2.36
torproject Tor=0.2.2.37
torproject Tor=0.2.2.38
torproject Tor=0.2.3
torproject Tor=0.2.3.13-alpha
torproject Tor=0.2.3.14-alpha
torproject Tor=0.2.3.15-alpha
torproject Tor=0.2.3.16-alpha
torproject Tor=0.2.3.17-beta
torproject Tor=0.2.3.18-rc
torproject Tor=0.2.3.19-rc
torproject Tor=0.2.3.20-rc
torproject Tor=0.2.3.21-rc
torproject Tor=0.2.3.22-rc
Event History
Feb 3, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2250?
CVE-2012-2250 is classified as a moderate severity vulnerability as it can lead to denial of service through assertion failure.
2
How does CVE-2012-2250 affect users?
CVE-2012-2250 affects users by potentially causing the Tor daemon to exit unexpectedly, disrupting services using Tor.
3
How do I fix CVE-2012-2250?
To fix CVE-2012-2250, update your Tor installation to version 0.2.3.24-rc or later.
4
Which versions of Tor are affected by CVE-2012-2250?
CVE-2012-2250 affects all versions of Tor prior to 0.2.3.24-rc.
5
What are the possible impacts of CVE-2012-2250 on Tor networks?
The possible impacts of CVE-2012-2250 on Tor networks include service interruptions and degraded user experience.