Read the docs
TI-2015-02584 Aliases CVE-2015-2929GHSA-f7jp-x5vp-978r

The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before…

Priority LOW 35Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and application exit) via a malformed HS descriptor.

Why it matters now

EPSS 0.01161 67th percentileScored 2026-11-07
Fix Fixed Tor (The Tor Project): 0.2.4.27, 0.2.5.12, 0.2.6.7

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
The Tor ProjectTorbefore 0.2.4.27; 0.2.5 to before 0.2.5.12; 0.2.6 to before 0.2.6.70.2.4.27, 0.2.5.12, 0.2.6.7Patch availableCNA
  • Tor VendorThe Tor Project Affected before 0.2.4.27; 0.2.5 to before 0.2.5.12; 0.2.6 to before 0.2.6.7 Fixed in 0.2.4.27, 0.2.5.12, 0.2.6.7 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*before 0.2.4.27; 0.2.5.1 to before 0.2.5.12; 0.2.6.1 to before 0.2.6.7Vulnerabletorproject
  • cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:* Versions before 0.2.4.27; 0.2.5.1 to before 0.2.5.12; 0.2.6.1 to before 0.2.6.7 Vulnerable ·torproject

Remediation

  • Fix · CNA Tor (The Tor Project) Fixed in 0.2.4.27, 0.2.5.12, 0.2.6.7

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-2929
  2. 2026-10-03 Alias added: GHSA-f7jp-x5vp-978r

References

Advisory 2

  • TI-2017-06332 Use after free in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before… CVSS 3.0HIGH 8.1
  • TI-2017-06330 Memory corruption in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9… CVSS 3.0HIGH 7.5
  • TI-2017-06328 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0… CVSS 3.0HIGH 7.5
  • TI-2015-02373 Improper input validation in Tor CVSS 3.1HIGH 7.5
  • TI-2015-02372 Improper handling of exceptional conditions in Tor CVSS 3.1HIGH 7.5
  • TI-2017-06329 NULL pointer dereference in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17… CVSS 3.0HIGH 7.5
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences