| Package | Affected versions | Patched versions |
|---|---|---|
| tor | ≥ 0.2.5.1, < 0.2.5.12≥ 0.2.6.1, < 0.2.6.7< 0.2.4.27 | 0.2.5.120.2.6.70.2.4.27 |
The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and application exit) via a malformed HS descriptor.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free