Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian DSA-4961-1 Critical: Tor Denial of Service Threat Report

debian
Calendar Grey August 23, 2021
Debian Logo
The Debian Security Notice DSA-4961-1 discusses a vulnerability in Tor's verification of signatures, allowing for potential denial of service attacks.
Henry de Valence reported a flaw in the signature verification code in Tor, a connection-based low-latency anonymous communication system
Topics%20covered

Topics Covered

security advisory denial of service debian signature verification tor

Summary

For the oldstable distribution (buster), this problem has been fixed
in version 0.3.5.16-1.

For the stable distribution (bullseye), this problem has been fixed in
version 0.4.5.10-1~deb11u1.

We recommend that you upgrade your tor packages.

For the detailed security status of tor please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/tor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: tor
CVE ID: CVE-2021-38385

Topics%20covered

Topics Covered

security advisory denial of service debian signature verification tor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here