CVE-2012-5573
First published: Mon Nov 26 2012(Updated: )
It was reported [1],[2] that Tor suffered from a denial of service vulnerability due to an error when handling SENDME cells. This could be exploited to cause excessive consumption of memory resources within an entry node. This is fixed in upstream version 0.2.3.25 (git [3]). [1] <a href="https://secunia.com/advisories/51329/">https://secunia.com/advisories/51329/</a> [2] <a href="https://trac.torproject.org/projects/tor/ticket/6252">https://trac.torproject.org/projects/tor/ticket/6252</a> [3] <a href="https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16">https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Torproject Tor | <=0.2.3.24 | |
| Torproject Tor | =0.0.2 | |
| Torproject Tor | =0.0.2-pre13 | |
| Torproject Tor | =0.0.2-pre14 | |
| Torproject Tor | =0.0.2-pre15 | |
| Torproject Tor | =0.0.2-pre16 | |
| Torproject Tor | =0.0.2-pre17 | |
| Torproject Tor | =0.0.2-pre18 | |
| Torproject Tor | =0.0.2-pre19 | |
| Torproject Tor | =0.0.2-pre20 | |
| Torproject Tor | =0.0.2-pre21 | |
| Torproject Tor | =0.0.2-pre22 | |
| Torproject Tor | =0.0.2-pre23 | |
| Torproject Tor | =0.0.2-pre24 | |
| Torproject Tor | =0.0.2-pre25 | |
| Torproject Tor | =0.0.2-pre26 | |
| Torproject Tor | =0.0.2-pre27 | |
| Torproject Tor | =0.0.3 | |
| Torproject Tor | =0.0.4 | |
| Torproject Tor | =0.0.5 | |
| Torproject Tor | =0.0.6 | |
| Torproject Tor | =0.0.6.1 | |
| Torproject Tor | =0.0.6.2 | |
| Torproject Tor | =0.0.7 | |
| Torproject Tor | =0.0.7.1 | |
| Torproject Tor | =0.0.7.2 | |
| Torproject Tor | =0.0.7.3 | |
| Torproject Tor | =0.0.8.1 | |
| Torproject Tor | =0.0.9.1 | |
| Torproject Tor | =0.0.9.2 | |
| Torproject Tor | =0.0.9.3 | |
| Torproject Tor | =0.0.9.4 | |
| Torproject Tor | =0.0.9.5 | |
| Torproject Tor | =0.0.9.6 | |
| Torproject Tor | =0.0.9.7 | |
| Torproject Tor | =0.0.9.8 | |
| Torproject Tor | =0.0.9.9 | |
| Torproject Tor | =0.0.9.10 | |
| Torproject Tor | =0.1.0.10 | |
| Torproject Tor | =0.1.0.11 | |
| Torproject Tor | =0.1.0.12 | |
| Torproject Tor | =0.1.0.13 | |
| Torproject Tor | =0.1.0.14 | |
| Torproject Tor | =0.1.0.15 | |
| Torproject Tor | =0.1.0.16 | |
| Torproject Tor | =0.1.0.17 | |
| Torproject Tor | =0.1.1.20 | |
| Torproject Tor | =0.1.1.21 | |
| Torproject Tor | =0.1.1.22 | |
| Torproject Tor | =0.1.1.23 | |
| Torproject Tor | =0.1.1.24 | |
| Torproject Tor | =0.1.1.25 | |
| Torproject Tor | =0.1.1.26 | |
| Torproject Tor | =0.1.2.13 | |
| Torproject Tor | =0.1.2.14 | |
| Torproject Tor | =0.1.2.15 | |
| Torproject Tor | =0.1.2.16 | |
| Torproject Tor | =0.1.2.17 | |
| Torproject Tor | =0.1.2.18 | |
| Torproject Tor | =0.1.2.19 | |
| Torproject Tor | =0.2.0.30 | |
| Torproject Tor | =0.2.0.31 | |
| Torproject Tor | =0.2.0.32 | |
| Torproject Tor | =0.2.0.33 | |
| Torproject Tor | =0.2.0.34 | |
| Torproject Tor | =0.2.0.35 | |
| Torproject Tor | =0.2.2.18 | |
| Torproject Tor | =0.2.2.19 | |
| Torproject Tor | =0.2.2.20 | |
| Torproject Tor | =0.2.2.21 | |
| Torproject Tor | =0.2.2.22 | |
| Torproject Tor | =0.2.2.23 | |
| Torproject Tor | =0.2.2.24 | |
| Torproject Tor | =0.2.2.25 | |
| Torproject Tor | =0.2.2.26 | |
| Torproject Tor | =0.2.2.27 | |
| Torproject Tor | =0.2.2.28 | |
| Torproject Tor | =0.2.2.29 | |
| Torproject Tor | =0.2.2.30 | |
| Torproject Tor | =0.2.2.31 | |
| Torproject Tor | =0.2.2.32 | |
| Torproject Tor | =0.2.2.33 | |
| Torproject Tor | =0.2.2.34 | |
| Torproject Tor | =0.2.2.35 | |
| Torproject Tor | =0.2.2.36 | |
| Torproject Tor | =0.2.2.37 | |
| Torproject Tor | =0.2.2.38 | |
| Torproject Tor | =0.2.3 | |
| Torproject Tor | =0.2.3.13-alpha | |
| Torproject Tor | =0.2.3.14-alpha | |
| Torproject Tor | =0.2.3.15-alpha | |
| Torproject Tor | =0.2.3.16-alpha | |
| Torproject Tor | =0.2.3.17-beta | |
| Torproject Tor | =0.2.3.18-rc | |
| Torproject Tor | =0.2.3.19-rc | |
| Torproject Tor | =0.2.3.20-rc | |
| Torproject Tor | =0.2.3.21-rc | |
| Torproject Tor | =0.2.3.22-rc | |
| Torproject Tor | =0.2.3.23-rc |
Remedy
https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://openwall.com/lists/oss-security/2012/11/26/11
- http://secunia.com/advisories/51329
- http://security.gentoo.org/glsa/glsa-201301-03.xml
- https://bugs.gentoo.org/show_bug.cgi?id=444804
- https://bugzilla.redhat.com/show_bug.cgi?id=880310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80289
- https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16
- https://gitweb.torproject.org/tor.git/blob/release-0.2.3:/ReleaseNotes
- https://trac.torproject.org/projects/tor/ticket/6252
- https://secunia.com/advisories/51329/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=880313
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=880314
- http://www.openwall.com/lists/oss-security/2012/11/26/11
- collector/nvd-index
- agent/weakness
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/remedy
- agent/last-modified-date
- agent/references
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-5573
- vendor/torproject
- canonical/torproject tor
- version/torproject tor/0.2.3.24
- version/torproject tor/0.0.2
- version/torproject tor/0.0.2-pre13
- version/torproject tor/0.0.2-pre14
- version/torproject tor/0.0.2-pre15
- version/torproject tor/0.0.2-pre16
- version/torproject tor/0.0.2-pre17
- version/torproject tor/0.0.2-pre18
- version/torproject tor/0.0.2-pre19
- version/torproject tor/0.0.2-pre20
- version/torproject tor/0.0.2-pre21
- version/torproject tor/0.0.2-pre22
- version/torproject tor/0.0.2-pre23
- version/torproject tor/0.0.2-pre24
- version/torproject tor/0.0.2-pre25
- version/torproject tor/0.0.2-pre26
- version/torproject tor/0.0.2-pre27
- version/torproject tor/0.0.3
- version/torproject tor/0.0.4
- version/torproject tor/0.0.5
- version/torproject tor/0.0.6
- version/torproject tor/0.0.6.1
- version/torproject tor/0.0.6.2
- version/torproject tor/0.0.7
- version/torproject tor/0.0.7.1
- version/torproject tor/0.0.7.2
- version/torproject tor/0.0.7.3
- version/torproject tor/0.0.8.1
- version/torproject tor/0.0.9.1
- version/torproject tor/0.0.9.2
- version/torproject tor/0.0.9.3
- version/torproject tor/0.0.9.4
- version/torproject tor/0.0.9.5
- version/torproject tor/0.0.9.6
- version/torproject tor/0.0.9.7
- version/torproject tor/0.0.9.8
- version/torproject tor/0.0.9.9
- version/torproject tor/0.0.9.10
- version/torproject tor/0.1.0.10
- version/torproject tor/0.1.0.11
- version/torproject tor/0.1.0.12
- version/torproject tor/0.1.0.13
- version/torproject tor/0.1.0.14
- version/torproject tor/0.1.0.15
- version/torproject tor/0.1.0.16
- version/torproject tor/0.1.0.17
- version/torproject tor/0.1.1.20
- version/torproject tor/0.1.1.21
- version/torproject tor/0.1.1.22
- version/torproject tor/0.1.1.23
- version/torproject tor/0.1.1.24
- version/torproject tor/0.1.1.25
- version/torproject tor/0.1.1.26
- version/torproject tor/0.1.2.13
- version/torproject tor/0.1.2.14
- version/torproject tor/0.1.2.15
- version/torproject tor/0.1.2.16
- version/torproject tor/0.1.2.17
- version/torproject tor/0.1.2.18
- version/torproject tor/0.1.2.19
- version/torproject tor/0.2.0.30
- version/torproject tor/0.2.0.31
- version/torproject tor/0.2.0.32
- version/torproject tor/0.2.0.33
- version/torproject tor/0.2.0.34
- version/torproject tor/0.2.0.35
- version/torproject tor/0.2.2.18
- version/torproject tor/0.2.2.19
- version/torproject tor/0.2.2.20
- version/torproject tor/0.2.2.21
- version/torproject tor/0.2.2.22
- version/torproject tor/0.2.2.23
- version/torproject tor/0.2.2.24
- version/torproject tor/0.2.2.25
- version/torproject tor/0.2.2.26
- version/torproject tor/0.2.2.27
- version/torproject tor/0.2.2.28
- version/torproject tor/0.2.2.29
- version/torproject tor/0.2.2.30
- version/torproject tor/0.2.2.31
- version/torproject tor/0.2.2.32
- version/torproject tor/0.2.2.33
- version/torproject tor/0.2.2.34
- version/torproject tor/0.2.2.35
- version/torproject tor/0.2.2.36
- version/torproject tor/0.2.2.37
- version/torproject tor/0.2.2.38
- version/torproject tor/0.2.3
- version/torproject tor/0.2.3.13-alpha
- version/torproject tor/0.2.3.14-alpha
- version/torproject tor/0.2.3.15-alpha
- version/torproject tor/0.2.3.16-alpha
- version/torproject tor/0.2.3.17-beta
- version/torproject tor/0.2.3.18-rc
- version/torproject tor/0.2.3.19-rc
- version/torproject tor/0.2.3.20-rc
- version/torproject tor/0.2.3.21-rc
- version/torproject tor/0.2.3.22-rc
- version/torproject tor/0.2.3.23-rc