Bug 1043456 - (CVE-2017-0376) VUL-0: CVE-2017-0376: tor: hidden service assertion through BEGIN_DIR cell on rendezvous circuit (TROVE-2017-005)
(CVE-2017-0376)
VUL-0: CVE-2017-0376: tor: hidden service assertion through BEGIN_DIR cell on...
Status: RESOLVED FIXED
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P3 - Medium : Normal
: ---
Assigned To: Security Team bot
Security Team bot
https://smash.suse.de/issue/186474/
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-06-08 18:44 UTC by Andreas Stieger
Modified: 2017-06-15 16:10 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Stieger 2017-06-08 18:44:29 UTC
https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html

>   o Major bugfixes (hidden service, relay, security, backport
> [.../
>     - Fix a remotely triggerable assertion failure caused by receiving a
>       BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug
>       22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix
>       on 0.2.2.1-alpha.

Fixed in:
0.3.0.8
0.2.4.29
0.2.5.14
0.2.6.12
0.2.7.8
0.2.8.14
0.2.9.11

https://trac.torproject.org/projects/tor/ticket/22494
https://gitweb.torproject.org/tor.git/commit/?id=56a7c5bc15e0447203a491c1ee37de9939ad1dcd

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-0376
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0376
Comment 1 Andreas Stieger 2017-06-08 19:01:10 UTC
submitted
Comment 2 Bernhard Wiedemann 2017-06-08 20:01:06 UTC
This is an autogenerated message for OBS integration:
This bug (1043456) was mentioned in
https://build.opensuse.org/request/show/502413 Factory / tor
https://build.opensuse.org/request/show/502415 42.2 / tor
Comment 3 Andreas Stieger 2017-06-15 11:30:02 UTC
releasing, done
Comment 4 Swamp Workflow Management 2017-06-15 16:10:18 UTC
openSUSE-SU-2017:1569-1: An update that fixes two vulnerabilities is now available.

Category: security (moderate)
Bug References: 1043455,1043456
CVE References: CVE-2017-0375,CVE-2017-0376
Sources used:
openSUSE Leap 42.2 (src):    tor-0.2.9.11-8.3.1