CVE-2009-0938
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of...
CVE-2009-0938 is a medium vulnerability (CVSS 5.0) in Tor, published March 18, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 79th percentile. Fixed in tor 0.2.0.34-1.
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
- Record
CVE-2009-0938- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
- Record
CVE-2009-0938- Updated
- 2026-11-02
EUVDEUVD-2009-0935 No score
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
- Record
EUVD-2009-0935- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p3mc-whjq-822x No score
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of...
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
- Record
GHSA-p3mc-whjq-822x- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
- Record
CVE-2009-0938- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-0938 No score
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
- Record
DEBIAN-CVE-2009-0938- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/34583
exchange.xforce.ibmcloud.com/vulnerabilities/49323
archives.seul.org/or/announce/Feb-2009/msg00000.html
securityfocus.com/bid/33713
security.gentoo.org/glsa/glsa-200904-11.xml
nvd.nist.gov/vuln/detail/CVE-2009-0938
github.com/advisories/GHSA-p3mc-whjq-822x
security-tracker.debian.org/tracker/CVE-2009-0938