CVE ID:	CVE-2016-8860
Description:	Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buf_t data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data.
Test IDs:	1.3.6.1.4.1.25623.1.0.703694   1.3.6.1.4.1.25623.1.1.10.2016.0356   1.3.6.1.4.1.25623.1.0.872034   1.3.6.1.4.1.25623.1.0.810140   1.3.6.1.4.1.25623.1.0.810152   1.3.6.1.4.1.25623.1.1.1.2.2016.663
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-8860 BugTraq ID: 95116 http://www.securityfocus.com/bid/95116 Debian Security Information: DSA-3694 (Google Search) http://www.debian.org/security/2016/dsa-3694 https://security.gentoo.org/glsa/201612-45 http://openwall.com/lists/oss-security/2016/10/19/11