Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tor tor 0.1.2.11 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-4174
Tor prior to 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote malicious users to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing comman...
Tor TorTor Tor 0.1.2.8Tor Tor 0.1.2.7Tor Tor 0.1.2.10Tor Tor 0.1.2.9Tor Tor 0.1.2.1Tor Tor 0.1.2.2Tor Tor 0.1.2.14Tor Tor 0.1.2.13Tor Tor 0.1.2.6Tor Tor 0.1.2.5Tor Tor 0.1.2.12Tor Tor 0.1.2.11Tor Tor 0.1.2.4Tor Tor 0.1.2.3
NA
CVE-2010-0383
Tor prior to 0.2.1.22, and 0.2.2.x prior to 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle malicious users to compromise the anonymity of traffic sources and destinations.
Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.2.1.1.21Tor Tor 0.0.9Tor Tor 0.0.6.1Tor Tor 0.0.6Tor Tor 0.1.0.13Tor Tor 0.1.0.14Tor Tor 0.0.9.6Tor Tor 0.0.9.7Tor Tor 0.1.2.13Tor Tor 0.1.2.10Tor Tor 0.1.1Tor Tor 0.0.2 Pre18Tor Tor 0.0.2 Pre16Tor Tor 0.0.2Tor Tor 0.1.1.8Tor Tor 0.1.1.8 AlphaTor Tor 0.1.1.4Tor Tor 0.1.1.4 AlphaTor Tor 0.1.0.6Tor Tor 0.1.0.16
NA
CVE-2010-0385
Tor prior to 0.2.1.22, and 0.2.2.x prior to 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote malicious users to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
Tor Tor 0.2.1.1.12Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.2.1.1.15Tor Tor 0.2.1.1.16Tor Tor 0.0.6.2Tor Tor 0.0.6.1Tor Tor 0.0.6Tor Tor 0.0.5Tor Tor 0.0.9.6Tor Tor 0.0.9.7Tor Tor 0.0.9.4Tor Tor 0.0.9.5Tor Tor 0.1.1Tor Tor 0.0.2 Pre18Tor Tor 0.0.2 Pre19Tor Tor 0.2.1.1.21Tor Tor 0.0.9Tor Tor 0.0.8.1Tor Tor 0.0.8Tor Tor 0.0.2 Pre25Tor Tor 0.1.0.13
NA
CVE-2010-1676
Heap-based buffer overflow in Tor prior to 0.2.1.28 and 0.2.2.x prior to 0.2.2.20-alpha allows remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.0.8.1Tor Tor 0.0.8Tor Tor 0.0.7.3Tor Tor 0.0.5Tor Tor 0.0.4Tor Tor 0.1.0.11Tor Tor 0.1.0.12Tor Tor 0.0.9.5Tor Tor 0.0.9.2Tor Tor 0.1.2.11Tor Tor 0.0.2 Pre21Tor Tor 0.0.2 Pre19Tor Tor 0.0.2 Pre20Tor Tor 0.1.1.7 AlphaTor Tor 0.1.1.7Tor Tor 0.1.1.3 AlphaTor Tor 0.1.1.3Tor Tor 0.1.0.5Tor Tor 0.1.0.8Tor Tor 0.1.0.18
NA
CVE-2009-0414
Unspecified vulnerability in Tor prior to 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption.
Tor Tor 0.0.8Tor Tor 0.0.7.3Tor TorTor Tor 0.0.5Tor Tor 0.1.0.14Tor Tor 0.1.0.11Tor Tor 0.0.9.4Tor Tor 0.0.9.5Tor Tor 0.0.2 Pre23Tor Tor 0.0.2 Pre24Tor Tor 0.0.2 Pre15Tor Tor 0.0.2 Pre16Tor Tor 0.0.2Tor Tor 0.1.1.9Tor Tor 0.1.1.8 AlphaTor Tor 0.1.1.5Tor Tor 0.1.1.4 AlphaTor Tor 0.1.1.1Tor Tor 0.1.0.9Tor Tor 0.1.1.10Tor Tor 0.1.0.19Tor Tor 0.1.0.4
NA
CVE-2011-0015
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote malicious users to cause a denial of service via a large compression factor.
Tor Tor 0.2.1.11Tor Tor 0.2.1.12Tor Tor 0.2.1.17Tor Tor 0.2.1.19Tor Tor 0.2.1.20Tor Tor 0.2.1.25Tor Tor 0.2.1.27Tor Tor 0.2.1.8Tor Tor 0.2.0.31Tor Tor 0.2.0.32Tor Tor 0.2.0.28Tor Tor 0.2.0.25Tor Tor 0.2.0.27Tor Tor 0.2.0.16Tor Tor 0.2.0.18Tor Tor 0.2.0.8Tor Tor 0.2.0.11Tor Tor 0.2.0.1Tor Tor 0.2.0.3Tor Tor 0.1.2.13Tor Tor 0.1.2.5Tor Tor 0.1.2.11
NA
CVE-2011-0016
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.
Tor Tor 0.2.1.12Tor Tor 0.2.1.13Tor Tor 0.2.1.14Tor Tor 0.2.1.15Tor TorTor Tor 0.2.1.3Tor Tor 0.2.1.4Tor Tor 0.2.1.5Tor Tor 0.2.0.25Tor Tor 0.2.0.22Tor Tor 0.2.0.23Tor Tor 0.2.0.30Tor Tor 0.2.0.8Tor Tor 0.2.0.7Tor Tor 0.2.0.6Tor Tor 0.2.0.13Tor Tor 0.2.0.12Tor Tor 0.1.2.5Tor Tor 0.1.2.6Tor Tor 0.1.2.7Tor Tor 0.1.2.8Tor Tor 0.1.1
NA
CVE-2011-0427
Heap-based buffer overflow in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.2.1.10Tor Tor 0.2.1.11Tor Tor 0.2.1.17Tor Tor 0.2.1.18Tor Tor 0.2.1.25Tor Tor 0.2.1.26Tor Tor 0.2.1.7Tor Tor 0.2.1.8Tor Tor 0.2.0.32Tor Tor 0.2.0.33Tor Tor 0.2.0.27Tor Tor 0.2.0.17Tor Tor 0.2.0.19Tor Tor 0.2.1.12Tor Tor 0.2.1.19Tor Tor 0.2.1.2Tor Tor 0.2.1.27Tor Tor 0.2.1.1Tor Tor 0.2.1.15Tor Tor 0.2.1.16Tor Tor 0.2.1.23Tor Tor 0.2.1.24
NA
CVE-2011-0490
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote malicious users to cause a denial of service (daemon crash) via vectors that trigger certain log messages.
Tor Tor 0.2.1.12Tor Tor 0.2.1.13Tor Tor 0.2.1.20Tor Tor 0.2.1.21Tor TorTor Tor 0.2.1.3Tor Tor 0.2.0.31Tor Tor 0.2.0.30Tor Tor 0.2.0.25Tor Tor 0.2.0.22Tor Tor 0.2.0.34Tor Tor 0.2.0.15Tor Tor 0.2.0.7Tor Tor 0.2.0.6Tor Tor 0.2.0.3Tor Tor 0.2.0.4Tor Tor 0.1.2.5Tor Tor 0.1.2.6Tor Tor 0.1.2.31Tor Tor 0.1.2.30Tor Tor 0.1.1Tor Tor 0.1.1.25
NA
CVE-2011-0491
The tor_realloc function in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote malicious users to cause a denial of service (daemon crash) via unspecified vectors, related to "un...
Tor Tor 0.2.1.12Tor Tor 0.2.1.13Tor Tor 0.2.1.20Tor Tor 0.2.1.21Tor TorTor Tor 0.2.1.3Tor Tor 0.2.0.31Tor Tor 0.2.0.25Tor Tor 0.2.0.22Tor Tor 0.2.0.34Tor Tor 0.2.0.15Tor Tor 0.2.0.8Tor Tor 0.2.0.7Tor Tor 0.2.0.6Tor Tor 0.2.0.3Tor Tor 0.2.0.4Tor Tor 0.2.1.11Tor Tor 0.2.1.19Tor Tor 0.2.1.2Tor Tor 0.2.1.26Tor Tor 0.2.1.27Tor Tor 0.2.1.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook