The Tor Project Tor
4 CVEs affecting The Tor Project Tor. Latest disclosed: 2020-01-24. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-2929 | High | 7.5 | 2020-01-24 | The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a deni… |
CVE-2015-2928 | High | 7.5 | 2020-01-24 | The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote attackers to cause a de… |
CVE-2015-2689 | High | 7.5 | 2020-01-24 | Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote… |
CVE-2015-2688 | High | 7.5 | 2020-01-24 | buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows r… |