| Package | Affected versions | Patched versions |
|---|---|---|
| tor | ≥ 0.2.5.1, < 0.2.5.11< 0.2.4.26 | 0.2.5.110.2.4.26 |
Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free