Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tor tor 0.1.2.9 vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2007-4174
Tor prior to 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote malicious users to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing comman...
Tor TorTor Tor 0.1.2.8Tor Tor 0.1.2.7Tor Tor 0.1.2.10Tor Tor 0.1.2.9Tor Tor 0.1.2.1Tor Tor 0.1.2.2Tor Tor 0.1.2.14Tor Tor 0.1.2.13Tor Tor 0.1.2.6Tor Tor 0.1.2.5Tor Tor 0.1.2.12Tor Tor 0.1.2.11Tor Tor 0.1.2.4Tor Tor 0.1.2.3
5
CVSSv2
CVE-2010-0383
Tor prior to 0.2.1.22, and 0.2.2.x prior to 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle malicious users to compromise the anonymity of traffic sources and destinations.
Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.2.1.1.21Tor Tor 0.0.9Tor Tor 0.0.6.1Tor Tor 0.0.6Tor Tor 0.1.0.13Tor Tor 0.1.0.14Tor Tor 0.0.9.6Tor Tor 0.0.9.7Tor Tor 0.1.2.13Tor Tor 0.1.2.10Tor Tor 0.1.1Tor Tor 0.0.2 Pre18Tor Tor 0.0.2 Pre16Tor Tor 0.0.2Tor Tor 0.1.1.8Tor Tor 0.1.1.8 AlphaTor Tor 0.1.1.4Tor Tor 0.1.1.4 AlphaTor Tor 0.1.0.6Tor Tor 0.1.0.16
5
CVSSv2
CVE-2010-0385
Tor prior to 0.2.1.22, and 0.2.2.x prior to 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote malicious users to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
Tor Tor 0.2.1.1.12Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.2.1.1.15Tor Tor 0.2.1.1.16Tor Tor 0.0.6.2Tor Tor 0.0.6.1Tor Tor 0.0.6Tor Tor 0.0.5Tor Tor 0.0.9.6Tor Tor 0.0.9.7Tor Tor 0.0.9.4Tor Tor 0.0.9.5Tor Tor 0.1.1Tor Tor 0.0.2 Pre18Tor Tor 0.0.2 Pre19Tor Tor 0.2.1.1.21Tor Tor 0.0.9Tor Tor 0.0.8.1Tor Tor 0.0.8Tor Tor 0.0.2 Pre25Tor Tor 0.1.0.13
10
CVSSv2
CVE-2010-1676
Heap-based buffer overflow in Tor prior to 0.2.1.28 and 0.2.2.x prior to 0.2.2.20-alpha allows remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.0.8.1Tor Tor 0.0.8Tor Tor 0.0.7.3Tor Tor 0.0.5Tor Tor 0.0.4Tor Tor 0.1.0.11Tor Tor 0.1.0.12Tor Tor 0.0.9.5Tor Tor 0.0.9.2Tor Tor 0.1.2.11Tor Tor 0.0.2 Pre21Tor Tor 0.0.2 Pre19Tor Tor 0.0.2 Pre20Tor Tor 0.1.1.7 AlphaTor Tor 0.1.1.7Tor Tor 0.1.1.3 AlphaTor Tor 0.1.1.3Tor Tor 0.1.0.5Tor Tor 0.1.0.8Tor Tor 0.1.0.18
10
CVSSv2
CVE-2009-0414
Unspecified vulnerability in Tor prior to 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption.
Tor Tor 0.0.8Tor Tor 0.0.7.3Tor TorTor Tor 0.0.5Tor Tor 0.1.0.14Tor Tor 0.1.0.11Tor Tor 0.0.9.4Tor Tor 0.0.9.5Tor Tor 0.0.2 Pre23Tor Tor 0.0.2 Pre24Tor Tor 0.0.2 Pre15Tor Tor 0.0.2 Pre16Tor Tor 0.0.2Tor Tor 0.1.1.9Tor Tor 0.1.1.8 AlphaTor Tor 0.1.1.5Tor Tor 0.1.1.4 AlphaTor Tor 0.1.1.1Tor Tor 0.1.0.9Tor Tor 0.1.1.10Tor Tor 0.1.0.19Tor Tor 0.1.0.4
6.8
CVSSv2
CVE-2011-0427
Heap-based buffer overflow in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.2.1.10Tor Tor 0.2.1.11Tor Tor 0.2.1.17Tor Tor 0.2.1.18Tor Tor 0.2.1.25Tor Tor 0.2.1.26Tor Tor 0.2.1.7Tor Tor 0.2.1.8Tor Tor 0.2.0.32Tor Tor 0.2.0.33Tor Tor 0.2.0.27Tor Tor 0.2.0.17Tor Tor 0.2.0.19Tor Tor 0.2.1.12Tor Tor 0.2.1.19Tor Tor 0.2.1.2Tor Tor 0.2.1.27Tor Tor 0.2.1.1Tor Tor 0.2.1.15Tor Tor 0.2.1.16Tor Tor 0.2.1.23Tor Tor 0.2.1.24
5
CVSSv2
CVE-2011-0490
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote malicious users to cause a denial of service (daemon crash) via vectors that trigger certain log messages.
Tor Tor 0.2.1.12Tor Tor 0.2.1.13Tor Tor 0.2.1.20Tor Tor 0.2.1.21Tor TorTor Tor 0.2.1.3Tor Tor 0.2.0.31Tor Tor 0.2.0.30Tor Tor 0.2.0.25Tor Tor 0.2.0.22Tor Tor 0.2.0.34Tor Tor 0.2.0.15Tor Tor 0.2.0.7Tor Tor 0.2.0.6Tor Tor 0.2.0.3Tor Tor 0.2.0.4Tor Tor 0.1.2.5Tor Tor 0.1.2.6Tor Tor 0.1.2.31Tor Tor 0.1.2.30Tor Tor 0.1.1Tor Tor 0.1.1.25
5
CVSSv2
CVE-2011-0491
The tor_realloc function in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote malicious users to cause a denial of service (daemon crash) via unspecified vectors, related to "un...
Tor Tor 0.2.1.12Tor Tor 0.2.1.13Tor Tor 0.2.1.20Tor Tor 0.2.1.21Tor TorTor Tor 0.2.1.3Tor Tor 0.2.0.31Tor Tor 0.2.0.25Tor Tor 0.2.0.22Tor Tor 0.2.0.34Tor Tor 0.2.0.15Tor Tor 0.2.0.8Tor Tor 0.2.0.7Tor Tor 0.2.0.6Tor Tor 0.2.0.3Tor Tor 0.2.0.4Tor Tor 0.2.1.11Tor Tor 0.2.1.19Tor Tor 0.2.1.2Tor Tor 0.2.1.26Tor Tor 0.2.1.27Tor Tor 0.2.1.8
5
CVSSv2
CVE-2011-0492
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file.
Tor Tor 0.2.1.1Tor Tor 0.2.1.10Tor Tor 0.2.1.16Tor Tor 0.2.1.17Tor Tor 0.2.1.23Tor Tor 0.2.1.24Tor Tor 0.2.1.6Tor Tor 0.2.1.7Tor Tor 0.2.0.29Tor Tor 0.2.0.32Tor Tor 0.2.0.30Tor Tor 0.2.0.26Tor Tor 0.2.0.20Tor Tor 0.2.0.19Tor Tor 0.2.0.12Tor Tor 0.2.1.11Tor Tor 0.2.1.12Tor Tor 0.2.1.18Tor Tor 0.2.1.19Tor Tor 0.2.1.25Tor Tor 0.2.1.26Tor Tor 0.2.1.8
5
CVSSv2
CVE-2011-0493
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha might allow remote malicious users to cause a denial of service (assertion failure and daemon exit) via vectors related to malformed router caches and improper handling of integer values.
Tor Tor 0.2.1.14Tor Tor 0.2.1.15Tor Tor 0.2.1.21Tor Tor 0.2.1.22Tor Tor 0.2.1.3Tor Tor 0.2.1.4Tor Tor 0.2.1.5Tor Tor 0.2.0.30Tor Tor 0.2.0.29Tor Tor 0.2.0.22Tor Tor 0.2.0.23Tor Tor 0.2.0.14Tor Tor 0.2.0.21Tor Tor 0.2.0.6Tor Tor 0.2.0.13Tor Tor 0.2.0.4Tor Tor 0.2.0.5Tor Tor 0.1.2.7Tor Tor 0.1.2.8Tor Tor 0.1.2.30Tor Tor 0.1.2.19Tor Tor 0.1.1.25
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook