[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] Libevent vulnerability CVE-2014-6272 - Tor affected?

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-talk] Libevent vulnerability CVE-2014-6272 - Tor affected?
From: Nikolas Raiser <nraiser@xxxxxx>
Date: Tue, 06 Jan 2015 21:50:23 +0100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Tue, 06 Jan 2015 15:56:24 -0500
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0

Hi folks,

can anyone tell me if Tor, since it uses libevent, is affected by thisvulnerability "Advisory: integer overflow in evbuffers for Libevent <=1.4.14b,2.0.21,2.1.4-alpha [CVE-2014-6272]"http://archives.seul.org/libevent/users/Jan-2015/msg00010.html .

Thanks a lot in advance!
Yours,
Nick

--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Libevent vulnerability CVE-2014-6272 - Tor affected?
  - From: Dave Warren
- Re: [tor-talk] Libevent vulnerability CVE-2014-6272 - Tor affected?
  - From: Justaguy

Prev by Author: Re: [tor-talk] DNSSEC better protecting users?
Next by Author: [tor-talk] Slow 4.0.3 ?
Previous by thread: Re: [tor-talk] New Software: P2P filesharing designed to use Tor
Next by thread: Re: [tor-talk] Libevent vulnerability CVE-2014-6272 - Tor affected?
Index(es):
- Author
- Thread