tor: denial of service

Several denial-of-service issues have been discovered in Tor, a connection-based low-latency anonymous communication system.

• Jowr discovered that very high DNS query load on a relay could trigger an assertion error.

• A relay could crash with an assertion error if a buffer of exactly the wrong layout was passed to buf_pullup() at exactly the wrong time.

CVEs were not available when this entry was created, and were added later. See the Tor release announcement for details.