Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and
    2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker
    could leverage this vulnerability to achieve arbitrary code execution in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2021-28550)

  - Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a
    Denial of Service (CPU consumption), aka TROVE-2020-002. (CVE-2020-10592)

  - Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a
    Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because
    a circuit-padding machine can be negotiated twice on the same circuit. (CVE-2020-10593)

  - Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a
    target, aka TROVE-2021-001. (CVE-2021-28089)

  - Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an assertion
    failure, aka TROVE-2021-002. (CVE-2021-28090)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a
    Denial of Service (CPU consumption), aka TROVE-2020-002. (CVE-2020-10592)

  - Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a
    Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because
    a circuit-padding machine can be negotiated twice on the same circuit. (CVE-2020-10593)

This update for tor fixes the following issues :

Updating tor to a newer version in the respective codestream.

  - tor 0.3.5.12 :

  - Check channels+circuits on relays more thoroughly     (TROVE-2020-005, boo#1178741)

  - Not affected by out-of-bound memory access     (CVE-2020-15572, boo#1173979)

  - Fix DoS defenses on bridges with a pluggable transport

  - CVE-2020-10592: CPU consumption DoS and timing patterns     (boo#1167013)

  - CVE-2020-10593: circuit padding memory leak     (boo#1167014) 

  - tor 0.4.4.6

  - Check channels+circuits on relays more thoroughly     (TROVE-2020-005, boo#1178741)

  - Fix a crash due to an out-of-bound memory access     (CVE-2020-15572, boo#1173979)

  - Fix logrotate to not fail when tor is stopped     (boo#1164275)

This update for tor to version 0.3.5.10 fixes the following issues :

  - tor was updated to version 0.3.5.10 :

  - CVE-2020-10592: Fixed a CPU consumption denial of     service and timing patterns (boo#1167013)

  - CVE-2020-10593: Fixed a circuit padding memory leak     (boo#1167014)

The remote host is affected by the vulnerability described in GLSA-202003-50 (Tor: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Tor, and tor. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

A denial of service vulnerability (by triggering high CPU consumption) was found in Tor, a connection-based low-latency anonymous communication system.

ID	Name	Product	Family	Severity
407405	Alpine: multiple tor packages: security update to 0.4.4.9-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407405	Alpine: multiple tor packages: security update to 0.4.4.9-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
407403	Alpine: multiple tor packages: security update to 0.4.2.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407403	Alpine: multiple tor packages: security update to 0.4.2.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
407400	Alpine: multiple tor packages: security update to 0.3.5.10-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407400	Alpine: multiple tor packages: security update to 0.3.5.10-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
143143	openSUSE Security Update : tor (openSUSE-2020-1970)	Nessus	SuSE Local Security Checks	high
135009	openSUSE Security Update : tor (openSUSE-2020-406)	Nessus	SuSE Local Security Checks	high
134925	GLSA-202003-50 : Tor: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
134774	Debian DSA-4644-1 : tor - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-10592

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high