Bug 1043456 (CVE-2017-0376)

Summary:	VUL-0: CVE-2017-0376: tor: hidden service assertion through BEGIN_DIR cell on rendezvous circuit (TROVE-2017-005)
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Andreas Stieger <astieger>
Component:	Incidents	Assignee:	Security Team bot <security-team>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P3 - Medium	CC:	smash_bz
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/186474/
Whiteboard:
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Andreas Stieger 2017-06-08 18:44:29 UTC

https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html

>   o Major bugfixes (hidden service, relay, security, backport
> [.../
>     - Fix a remotely triggerable assertion failure caused by receiving a
>       BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug
>       22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix
>       on 0.2.2.1-alpha.

Fixed in:
0.3.0.8
0.2.4.29
0.2.5.14
0.2.6.12
0.2.7.8
0.2.8.14
0.2.9.11

https://trac.torproject.org/projects/tor/ticket/22494
https://gitweb.torproject.org/tor.git/commit/?id=56a7c5bc15e0447203a491c1ee37de9939ad1dcd

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-0376
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0376

Comment 1 Andreas Stieger 2017-06-08 19:01:10 UTC

submitted

Comment 2 Bernhard Wiedemann 2017-06-08 20:01:06 UTC

This is an autogenerated message for OBS integration:
This bug (1043456) was mentioned in
https://build.opensuse.org/request/show/502413 Factory / tor
https://build.opensuse.org/request/show/502415 42.2 / tor

Comment 3 Andreas Stieger 2017-06-15 11:30:02 UTC

releasing, done

Comment 4 Swamp Workflow Management 2017-06-15 16:10:18 UTC

openSUSE-SU-2017:1569-1: An update that fixes two vulnerabilities is now available.

Category: security (moderate)
Bug References: 1043455,1043456
CVE References: CVE-2017-0375,CVE-2017-0376
Sources used:
openSUSE Leap 42.2 (src):    tor-0.2.9.11-8.3.1