[tor-talk] Libevent vulnerability CVE-2014-6272 - Tor affected?

Tue Jan 6 20:58:13 UTC 2015

On 2015-01-06 12:50, Nikolas Raiser wrote:
> Hi folks,
>
> can anyone tell me if Tor, since it uses libevent, is affected by this 
> vulnerability "Advisory: integer overflow in evbuffers for Libevent <= 
> 1.4.14b,2.0.21,2.1.4-alpha [CVE-2014-6272]" 
> http://archives.seul.org/libevent/users/Jan-2015/msg00010.html .

Check the list archives for CVE-2014-6272. "The answer is: this does not 
affect Tor."

-- 
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren