Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

tor tor 0.2.2.8 vulnerabilities and exploits

(subscribe to this query)
890
VMScore

CVE-2010-1676

Heap-based buffer overflow in Tor prior to 0.2.1.28 and 0.2.2.x prior to 0.2.2.20-alpha allows remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.1.1.1 AlphaTor Tor 0.2.1.1.14Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.1.1.12Tor Tor 0.1.2.1 Alpha-cvsTor Tor 0.1.0.18Tor Tor 0.2.2.8Tor Tor 0.0.2 Pre24Tor Tor 0.2.1.1.16Tor Tor 0.0.2 Pre16Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.0.5Tor Tor 0.1.0.7Tor Tor 0.0.9.8Tor Tor 0.0.9.10Tor Tor 0.1.1.19Tor Tor 0.1.2.18Tor Tor 0.0.9.2
676
VMScore

CVE-2011-2778

Multiple heap-based buffer overflows in Tor prior to 0.2.2.35 allow remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.
Tor Tor 0.2.1.1.14Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.2.1.1.4Tor Tor 0.2.1.1.1Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.1.1.12Tor Tor 0.2.1.1.8Tor Tor 0.1.0.18Tor Tor 0.2.2.8Tor Tor 0.2.1.1.16Tor Tor 0.2.0.30Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.2.1.1.27Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7
605
VMScore

CVE-2011-0427

Heap-based buffer overflow in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.2.8Tor Tor 0.0.2 Pre24Tor Tor 0.2.0.30Tor Tor 0.0.2 Pre16Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7Tor Tor 0.0.9.8Tor Tor 0.0.9.10Tor Tor 0.1.1.19Tor Tor 0.1.2.18Tor Tor 0.0.9.2Tor Tor 0.1.2.10
516
VMScore

CVE-2011-2768

Tor prior to 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client ...
Tor Tor 0.2.1.1.14Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.2.1.1.4Tor Tor 0.2.1.1.1Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.1.1.12Tor Tor 0.2.1.1.8Tor Tor 0.1.0.18Tor Tor 0.2.2.8Tor Tor 0.2.1.1.16Tor Tor 0.2.0.30Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.2.1.1.27Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7
445
VMScore

CVE-2011-0015

Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote malicious users to cause a denial of service via a large compression factor.
Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.2.8Tor Tor 0.0.2 Pre24Tor Tor 0.2.0.30Tor Tor 0.0.2 Pre16Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7Tor Tor 0.0.9.8Tor Tor 0.0.9.10Tor Tor 0.1.1.19Tor Tor 0.1.2.18Tor Tor 0.0.9.2Tor Tor 0.1.2.10
445
VMScore

CVE-2011-0492

Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file.
Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.2.8Tor Tor 0.0.2 Pre24Tor Tor 0.2.0.30Tor Tor 0.0.2 Pre16Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7Tor Tor 0.0.9.8Tor Tor 0.0.9.10Tor Tor 0.1.1.19Tor Tor 0.1.2.18Tor Tor 0.0.9.2Tor Tor 0.1.2.10
445
VMScore

CVE-2011-0490

Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote malicious users to cause a denial of service (daemon crash) via vectors that trigger certain log messages.
Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.2.8Tor Tor 0.0.2 Pre24Tor Tor 0.2.0.30Tor Tor 0.0.2 Pre16Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7Tor Tor 0.0.9.8Tor Tor 0.0.9.10Tor Tor 0.1.1.19Tor Tor 0.1.2.18Tor Tor 0.0.9.2Tor Tor 0.1.2.10
445
VMScore

CVE-2011-0491

The tor_realloc function in Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote malicious users to cause a denial of service (daemon crash) via unspecified vectors, related to "un...
Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.2.8Tor Tor 0.0.2 Pre24Tor Tor 0.2.0.30Tor Tor 0.0.2 Pre16Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7Tor Tor 0.0.9.8Tor Tor 0.0.9.10Tor Tor 0.1.1.19Tor Tor 0.1.2.18Tor Tor 0.0.9.2Tor Tor 0.1.2.10
445
VMScore

CVE-2011-0493

Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha might allow remote malicious users to cause a denial of service (assertion failure and daemon exit) via vectors related to malformed router caches and improper handling of integer values.
Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.2.8Tor Tor 0.0.2 Pre24Tor Tor 0.2.0.30Tor Tor 0.0.2 Pre16Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7Tor Tor 0.0.9.8Tor Tor 0.0.9.10Tor Tor 0.1.1.19Tor Tor 0.1.2.18Tor Tor 0.0.9.2Tor Tor 0.1.2.10
383
VMScore

CVE-2011-4894

Tor prior to 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote malicious users to enumerate bridges by observing DirPort connections.
Tor Tor 0.2.1.1.14Tor Tor 0.2.1.10Tor Tor 0.2.2.17Tor Tor 0.1.1.6Tor Tor 0.2.1.26Tor Tor 0.1.1.2Tor Tor 0.2.1.1.4Tor Tor 0.2.1.1.1Tor Tor 0.1.1.9Tor Tor 0.0.6.2Tor Tor 0.2.1.1.12Tor Tor 0.2.1.1.8Tor Tor 0.1.0.18Tor Tor 0.2.2.8Tor Tor 0.2.1.1.16Tor Tor 0.2.0.30Tor Tor 0.2.2.5Tor Tor 0.1.1.23Tor Tor 0.2.1.1.27Tor Tor 0.0.5Tor Tor 0.2.0.11Tor Tor 0.1.0.7
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusionCVE-2023-38506CVE-2024-37198CVE-2023-45197CVE-2024-38621CVE-2024-30103elevation of privilegeCVE-2024-0044IMAP
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook