Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buf_t data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data.

The remote host is affected by the vulnerability described in GLSA-201612-45 (Tor: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Tor. Please review the       CVE identifier and change log referenced below for details.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

update to upstream release 0.2.8.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It has been discovered that Tor treats the contents of some buffer chunks as if they were a NUL-terminated string. This issue could enable a remote attacker to crash a Tor client, hidden service, relay, or authority.

ID	Name	Product	Family	Severity
96125	GLSA-201612-45 : Tor: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
94873	Fedora 25 : tor (2016-e56ed6f472)	Nessus	Fedora Local Security Checks	high
94483	Fedora 23 : tor (2016-3b6393acdd)	Nessus	Fedora Local Security Checks	high
94457	Fedora 24 : tor (2016-59316cf667)	Nessus	Fedora Local Security Checks	high
94115	Debian DSA-3694-1 : tor - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-8860

high

Tenable Plugins

high

high

high

high

high