torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Don't give the Guard flag to relays without the CVE-2011-2768 fix

Browse Source
This commit is contained in:
Robert Ransom
2011-10-25 00:24:15 -07:00
committed by Sebastian Hahn
parent 4d0f152aad
commit 00fffbc1a1
2 changed files with 77 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/issue-2011-10-19L
+7
View File
@@ -19,3 +19,10 @@
client is connected to a patched relay. Bugfix on FIXME; found
by frosty_un.
- Don't assign the Guard flag to relays running a version of Tor
which would use an OR connection on which it has received a
CREATE_FAST cell to satisfy an EXTEND request. Mitigates
CVE-2011-2768, by ensuring that clients will not connect
directly to any relay which an attacker could probe for an
unpatched client's connections.