Bug 1043456 (CVE-2017-0376)

Summary: VUL-0: CVE-2017-0376: tor: hidden service assertion through BEGIN_DIR cell on rendezvous circuit (TROVE-2017-005)
Product: [Novell Products] SUSE Security Incidents Reporter: Andreas Stieger <astieger>
Component: IncidentsAssignee: Security Team bot <security-team>
Status: RESOLVED FIXED QA Contact: Security Team bot <security-team>
Severity: Normal    
Priority: P3 - Medium CC: smash_bz
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: Other   
URL: https://smash.suse.de/issue/186474/
Found By: Security Response Team Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Andreas Stieger 2017-06-08 18:44:29 UTC

>   o Major bugfixes (hidden service, relay, security, backport
> [.../
>     - Fix a remotely triggerable assertion failure caused by receiving a
>       BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug
>       22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix
>       on

Fixed in:


Comment 1 Andreas Stieger 2017-06-08 19:01:10 UTC
Comment 2 Bernhard Wiedemann 2017-06-08 20:01:06 UTC
This is an autogenerated message for OBS integration:
This bug (1043456) was mentioned in
https://build.opensuse.org/request/show/502413 Factory / tor
https://build.opensuse.org/request/show/502415 42.2 / tor
Comment 3 Andreas Stieger 2017-06-15 11:30:02 UTC
releasing, done
Comment 4 Swamp Workflow Management 2017-06-15 16:10:18 UTC
openSUSE-SU-2017:1569-1: An update that fixes two vulnerabilities is now available.

Category: security (moderate)
Bug References: 1043455,1043456
CVE References: CVE-2017-0375,CVE-2017-0376
Sources used:
openSUSE Leap 42.2 (src):    tor-