Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.

This update for tor fixes the following issues :

Updating tor to a newer version in the respective codestream.

  - tor 0.3.5.12 :

  - Check channels+circuits on relays more thoroughly     (TROVE-2020-005, boo#1178741)

  - Not affected by out-of-bound memory access     (CVE-2020-15572, boo#1173979)

  - Fix DoS defenses on bridges with a pluggable transport

  - CVE-2020-10592: CPU consumption DoS and timing patterns     (boo#1167013)

  - CVE-2020-10593: circuit padding memory leak     (boo#1167014) 

  - tor 0.4.4.6

  - Check channels+circuits on relays more thoroughly     (TROVE-2020-005, boo#1178741)

  - Fix a crash due to an out-of-bound memory access     (CVE-2020-15572, boo#1173979)

  - Fix logrotate to not fail when tor is stopped     (boo#1164275)

This update for tor to version 0.3.5.10 fixes the following issues :

  - tor was updated to version 0.3.5.10 :

  - CVE-2020-10592: Fixed a CPU consumption denial of     service and timing patterns (boo#1167013)

  - CVE-2020-10593: Fixed a circuit padding memory leak     (boo#1167014)

The remote host is affected by the vulnerability described in GLSA-202003-50 (Tor: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Tor, and tor. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
143143	openSUSE Security Update : tor (openSUSE-2020-1970)	Nessus	SuSE Local Security Checks	high
135009	openSUSE Security Update : tor (openSUSE-2020-406)	Nessus	SuSE Local Security Checks	high
134925	GLSA-202003-50 : Tor: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2020-10593

high

Tenable Plugins

high

high

high