CVE-2020-10592: High severity torproject Tor vulnerability
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/torto a version that resolves this vulnerability.Fixed in 0.3.5.10-r0 - Upgrade
Upgrade
alpine/torto a version that resolves this vulnerability.Fixed in 0.4.4.9-r0 - Upgrade
Upgrade
alpine/torto a version that resolves this vulnerability.Fixed in 0.4.2.7-r0
Event History
Frequently Asked Questions
What is CVE-2020-10592?
CVE-2020-10592 is a vulnerability in Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 that allows remote attackers to cause a Denial of Service (CPU consumption).
How can remote attackers exploit CVE-2020-10592?
Remote attackers can exploit CVE-2020-10592 to cause a Denial of Service by consuming excessive CPU resources.
What is the severity of CVE-2020-10592?
CVE-2020-10592 has a severity rating of 7.5 (High).
Which software versions are affected by CVE-2020-10592?
Tor versions before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 are affected by CVE-2020-10592.
How can I mitigate CVE-2020-10592?
To mitigate CVE-2020-10592, it is recommended to update Tor to version 0.3.5.10, 0.4.1.9, or 0.4.2.7.