tor vulnerabilities (Debian)
107 vulnerabilities.
-
torDebian Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which... 6.5 Medium -
torDebian tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached... 7.5 High -
torDebian tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails.... 6.5 Medium -
torDebian tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream... 3.7 Low -
torDebian Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate... 5.3 Medium -
torDebian Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a... 8.9 High -
torDebian Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object... 5.9 Medium -
torDebian Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already... 7.0 High -
torDebian Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE... 3.7 Low -
torDebian Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka... 3.7 Low -
torDebian Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash... 3.7 Low -
torDebian Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of... 3.7 Low -
torDebian Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. 3.7 Low -
torDebian Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a... 3.7 Low -
torDebian Tor Onion Service Descriptor resource consumption 6.3 Medium -
torDebian tor - security update No score -
torDebian The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol... 6.5 Medium -
torDebian Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation. 7.5 High -
torDebian Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature... 7.5 High -
torDebian An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service... 7.5 High -
torDebian An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for... 7.5 High -
torDebian An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge... 7.5 High -
torDebian Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an... 5.3 Medium -
torDebian Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU... 7.5 High -
torDebian Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service ... 7.5 High -
torDebian Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to... 7.5 High -
torDebian Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to... 7.5 High -
torDebian The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous... 5.3 Medium -
torDebian In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2... 7.5 High -
torDebian A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers... 7.5 High -
torDebian An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2... 7.5 High -
torDebian In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before... 8.1 High -
torDebian In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before... 3.7 Low -
torDebian In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before... 7.5 High -
torDebian In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before... 7.5 High -
torDebian In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before... 7.5 High -
torDebian The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x... 5.9 Medium -
torDebian debian/tor.init in the Debian tor_0.2.9.11-1~deb9u1 package for Tor was designed to execute aa... 7.5 High -
torDebian The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure... 7.5 High -
torDebian Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via... 7.5 High -
torDebian Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to... 7.5 High -
torDebian The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,... 7.5 High -
torDebian The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,... 7.5 High -
torDebian Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection... 7.5 High -
torDebian buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected... 7.5 High -
torDebian Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound... 5.8 Medium -
torDebian Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure... 5.0 Medium -
torDebian Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure... 5.0 Medium -
torDebian Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting... 4.0 Medium -
torDebian The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains... 5.0 Medium - Show olderLoading…