CVE-2020-10592: Opensuse Backports

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.

Affected products

• Opensuse Backports: version sle-15 only
• Opensuse Leap: version 15.1 only
• Torproject Tor: from 0.3.5, before 0.3.5.10 (fixed in 0.3.5.10); after 0.4.1.0, before 0.4.1.9 (fixed in 0.4.1.9); after 0.4.2.0, up to and including 0.4.2.7

Published 2020-03-23. Last modified 2026-06-17.