Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tor tor 0.2.2.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-0384
Tor 0.2.2.x prior to 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstanc...
Tor Tor 0.2.2.2Tor Tor 0.2.2.1Tor Tor 0.2.2.3Tor Tor 0.2.2.5Tor Tor 0.2.2.6Tor Tor 0.2.2.4
NA
CVE-2010-0383
Tor prior to 0.2.1.22, and 0.2.2.x prior to 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle malicious users to compromise the anonymity of traffic sources and destinations.
Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.2.1.1.21Tor Tor 0.0.9Tor Tor 0.0.6.1Tor Tor 0.0.6Tor Tor 0.1.0.13Tor Tor 0.1.0.14Tor Tor 0.0.9.6Tor Tor 0.0.9.7Tor Tor 0.1.2.13Tor Tor 0.1.2.10Tor Tor 0.1.1Tor Tor 0.0.2 Pre18Tor Tor 0.0.2 Pre16Tor Tor 0.0.2Tor Tor 0.1.1.8Tor Tor 0.1.1.8 AlphaTor Tor 0.1.1.4Tor Tor 0.1.1.4 AlphaTor Tor 0.1.0.6Tor Tor 0.1.0.16
NA
CVE-2010-0385
Tor prior to 0.2.1.22, and 0.2.2.x prior to 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote malicious users to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
Tor Tor 0.2.1.1.12Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.2.1.1.15Tor Tor 0.2.1.1.16Tor Tor 0.0.6.2Tor Tor 0.0.6.1Tor Tor 0.0.6Tor Tor 0.0.5Tor Tor 0.0.9.6Tor Tor 0.0.9.7Tor Tor 0.0.9.4Tor Tor 0.0.9.5Tor Tor 0.1.1Tor Tor 0.0.2 Pre18Tor Tor 0.0.2 Pre19Tor Tor 0.2.1.1.21Tor Tor 0.0.9Tor Tor 0.0.8.1Tor Tor 0.0.8Tor Tor 0.0.2 Pre25Tor Tor 0.1.0.13
NA
CVE-2010-1676
Heap-based buffer overflow in Tor prior to 0.2.1.28 and 0.2.2.x prior to 0.2.2.20-alpha allows remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.2.1.1.13Tor Tor 0.2.1.1.14Tor Tor 0.0.8.1Tor Tor 0.0.8Tor Tor 0.0.7.3Tor Tor 0.0.5Tor Tor 0.0.4Tor Tor 0.1.0.11Tor Tor 0.1.0.12Tor Tor 0.0.9.5Tor Tor 0.0.9.2Tor Tor 0.1.2.11Tor Tor 0.0.2 Pre21Tor Tor 0.0.2 Pre19Tor Tor 0.0.2 Pre20Tor Tor 0.1.1.7 AlphaTor Tor 0.1.1.7Tor Tor 0.1.1.3 AlphaTor Tor 0.1.1.3Tor Tor 0.1.0.5Tor Tor 0.1.0.8Tor Tor 0.1.0.18
NA
CVE-2011-0427
Heap-based buffer overflow in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.2.1.10Tor Tor 0.2.1.11Tor Tor 0.2.1.17Tor Tor 0.2.1.18Tor Tor 0.2.1.25Tor Tor 0.2.1.26Tor Tor 0.2.1.7Tor Tor 0.2.1.8Tor Tor 0.2.0.32Tor Tor 0.2.0.33Tor Tor 0.2.0.27Tor Tor 0.2.0.17Tor Tor 0.2.0.19Tor Tor 0.2.1.12Tor Tor 0.2.1.19Tor Tor 0.2.1.2Tor Tor 0.2.1.27Tor Tor 0.2.1.1Tor Tor 0.2.1.15Tor Tor 0.2.1.16Tor Tor 0.2.1.23Tor Tor 0.2.1.24
NA
CVE-2011-0490
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote malicious users to cause a denial of service (daemon crash) via vectors that trigger certain log messages.
Tor Tor 0.2.1.12Tor Tor 0.2.1.13Tor Tor 0.2.1.20Tor Tor 0.2.1.21Tor TorTor Tor 0.2.1.3Tor Tor 0.2.0.31Tor Tor 0.2.0.30Tor Tor 0.2.0.25Tor Tor 0.2.0.22Tor Tor 0.2.0.34Tor Tor 0.2.0.15Tor Tor 0.2.0.7Tor Tor 0.2.0.6Tor Tor 0.2.0.3Tor Tor 0.2.0.4Tor Tor 0.1.2.5Tor Tor 0.1.2.6Tor Tor 0.1.2.31Tor Tor 0.1.2.30Tor Tor 0.1.1Tor Tor 0.1.1.25
NA
CVE-2011-0491
The tor_realloc function in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote malicious users to cause a denial of service (daemon crash) via unspecified vectors, related to "un...
Tor Tor 0.2.1.12Tor Tor 0.2.1.13Tor Tor 0.2.1.20Tor Tor 0.2.1.21Tor TorTor Tor 0.2.1.3Tor Tor 0.2.0.31Tor Tor 0.2.0.25Tor Tor 0.2.0.22Tor Tor 0.2.0.34Tor Tor 0.2.0.15Tor Tor 0.2.0.8Tor Tor 0.2.0.7Tor Tor 0.2.0.6Tor Tor 0.2.0.3Tor Tor 0.2.0.4Tor Tor 0.2.1.11Tor Tor 0.2.1.19Tor Tor 0.2.1.2Tor Tor 0.2.1.26Tor Tor 0.2.1.27Tor Tor 0.2.1.8
NA
CVE-2011-0492
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file.
Tor Tor 0.2.1.1Tor Tor 0.2.1.10Tor Tor 0.2.1.16Tor Tor 0.2.1.17Tor Tor 0.2.1.23Tor Tor 0.2.1.24Tor Tor 0.2.1.6Tor Tor 0.2.1.7Tor Tor 0.2.0.29Tor Tor 0.2.0.32Tor Tor 0.2.0.30Tor Tor 0.2.0.26Tor Tor 0.2.0.20Tor Tor 0.2.0.19Tor Tor 0.2.0.12Tor Tor 0.2.1.11Tor Tor 0.2.1.12Tor Tor 0.2.1.18Tor Tor 0.2.1.19Tor Tor 0.2.1.25Tor Tor 0.2.1.26Tor Tor 0.2.1.8
NA
CVE-2011-0493
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha might allow remote malicious users to cause a denial of service (assertion failure and daemon exit) via vectors related to malformed router caches and improper handling of integer values.
Tor Tor 0.2.1.14Tor Tor 0.2.1.15Tor Tor 0.2.1.21Tor Tor 0.2.1.22Tor Tor 0.2.1.3Tor Tor 0.2.1.4Tor Tor 0.2.1.5Tor Tor 0.2.0.30Tor Tor 0.2.0.29Tor Tor 0.2.0.22Tor Tor 0.2.0.23Tor Tor 0.2.0.14Tor Tor 0.2.0.21Tor Tor 0.2.0.6Tor Tor 0.2.0.13Tor Tor 0.2.0.4Tor Tor 0.2.0.5Tor Tor 0.1.2.7Tor Tor 0.1.2.8Tor Tor 0.1.2.30Tor Tor 0.1.2.19Tor Tor 0.1.1.25
NA
CVE-2011-0015
Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote malicious users to cause a denial of service via a large compression factor.
Tor Tor 0.2.1.11Tor Tor 0.2.1.12Tor Tor 0.2.1.17Tor Tor 0.2.1.19Tor Tor 0.2.1.20Tor Tor 0.2.1.25Tor Tor 0.2.1.27Tor Tor 0.2.1.8Tor Tor 0.2.0.31Tor Tor 0.2.0.32Tor Tor 0.2.0.28Tor Tor 0.2.0.25Tor Tor 0.2.0.27Tor Tor 0.2.0.16Tor Tor 0.2.0.18Tor Tor 0.2.0.8Tor Tor 0.2.0.11Tor Tor 0.2.0.1Tor Tor 0.2.0.3Tor Tor 0.1.2.13Tor Tor 0.1.2.5Tor Tor 0.1.2.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook