torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Discard extraneous renegotiation attempts in the v3 link protocol

Browse Source 
Failure to do so left us open to a remotely triggerable assertion
failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by
"some guy from France".

This patch is a forward-port to 0.2.4, to work with the new channel
logic.
This commit is contained in:
Nick Mathewson
2012-10-16 13:41:55 -04:00
parent 94a0309909
commit 3d8b73db55
4 changed files with 19 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/cve-2012-2249
+5
View File
@@ -0,0 +1,5 @@
o Major bugfixes (security):
- Discard extraneous renegotiation attempts once the V3 link
protocol has been initiated. Failure to do so left us open to
a remotely triggerable assertion failure. Fixes CVE-2012-2249;
bugfix on 0.2.3.6-alpha. Reported by "some guy from France".