CVE-2015-2688: High severity tor project tor vulnerability
bufpullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2015-2688?
CVE-2015-2688 is a vulnerability in Tor that allows remote attackers to cause a denial of service.
How does CVE-2015-2688 impact Tor?
CVE-2015-2688 can cause a denial of service by triggering an assertion failure and daemon exit.
What is the severity of CVE-2015-2688?
CVE-2015-2688 has a severity score of 7.5, which is considered high.
How can I fix CVE-2015-2688?
To fix CVE-2015-2688, users should update to Tor version 0.2.4.26 or 0.2.5.x before 0.2.5.11.
Where can I find more information about CVE-2015-2688?
For more information about CVE-2015-2688, you can refer to the Tor Project mailing list and the Tor Project ticket for this vulnerability.