Tor vulnerabilities

Products

• Tor 57

Newest

• tor routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration... CVE-2012-3519 Fix available 5.0 MediumAugust 26, 2012
• tor The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does... CVE-2012-3518 Fix available 5.0 MediumAugust 26, 2012
• tor Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to... CVE-2012-3517 Fix available 5.0 MediumAugust 26, 2012
• tor Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option,... CVE-2011-4897 Fix available 4.3 MediumDecember 23, 2011
• tor Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but... CVE-2011-4896 Fix available 4.3 MediumDecember 23, 2011
• tor Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different... CVE-2011-4895 Fix available 4.3 MediumDecember 23, 2011
• tor Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS... CVE-2011-4894 Fix available 4.3 MediumDecember 23, 2011
• tor Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a... CVE-2011-2778 Fix available 7.6 HighDecember 16, 2011
• tor Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in... CVE-2011-2769 Fix available 4.3 MediumOctober 28, 2011
• tor Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part... CVE-2011-2768 Fix available 5.8 MediumOctober 28, 2011
• tor Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows... CVE-2011-1924 Fix available 5.0 MediumJune 14, 2011
• tor Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a... CVE-2011-0493 Fix available 5.0 MediumJanuary 17, 2011
• tor Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial... CVE-2011-0492 Fix available 5.0 MediumJanuary 17, 2011
• tor The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not... CVE-2011-0491 Fix available 5.0 MediumJanuary 17, 2011
• tor Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log... CVE-2011-0490 Fix available 5.0 MediumJanuary 17, 2011
• tor Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote... CVE-2011-0427 Fix available 6.8 MediumJanuary 17, 2011
• tor Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory... CVE-2011-0016 Fix available 2.1 LowJanuary 17, 2011
• tor Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of... CVE-2011-0015 Fix available 5.0 MediumJanuary 17, 2011
• tor Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote... CVE-2010-1676 Fix available 10.0 HighDecember 21, 2010
• tor Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory... CVE-2010-0385 Fix available 5.0 MediumJanuary 25, 2010
• tor Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent... CVE-2010-0384 2.1 LowJanuary 25, 2010
• tor Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain... CVE-2010-0383 Fix available 5.0 MediumJanuary 25, 2010
• tor The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0... CVE-2009-2426 Fix available 5.0 MediumJuly 10, 2009
• tor Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via... CVE-2009-2425 Fix available 5.0 MediumJuly 10, 2009
• tor Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and... CVE-2009-0939 Fix available 10.0 HighMarch 18, 2009
• tor Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of... CVE-2009-0938 Fix available 5.0 MediumMarch 18, 2009
• tor Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of... CVE-2009-0937 Fix available 5.0 MediumMarch 18, 2009
• tor Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service ... CVE-2009-0936 Fix available 5.0 MediumMarch 18, 2009
• tor Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an... CVE-2009-0654 5.1 MediumFebruary 20, 2009
• tor Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors... CVE-2009-0414 Fix available 10.0 HighFebruary 3, 2009
• tor Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration... CVE-2008-5398 Fix available 9.3 HighDecember 9, 2008
• tor Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options,... CVE-2008-5397 Fix available 7.2 HighDecember 9, 2008
• tor Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to... CVE-2007-4174 Public exploitFix available 5.8 MediumAugust 7, 2007
• tor Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to... CVE-2007-4099 Fix available 5.8 MediumJuly 30, 2007
• tor Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might... CVE-2007-4098 Fix available 5.8 MediumJuly 30, 2007
• tor Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which... CVE-2007-4097 Fix available 6.4 MediumJuly 30, 2007
• tor Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to... CVE-2007-4096 Fix available 5.8 MediumJuly 30, 2007
• tor Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the... CVE-2007-3165 Fix available 5.0 MediumJune 11, 2007
• tor Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers... CVE-2007-1103 4.3 MediumFebruary 26, 2007
• tor Tor allows remote attackers to discover the IP address of a hidden service by accessing this... CVE-2006-6893 5.0 MediumDecember 31, 2006
• scatterchat, tor +1 more Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2)... CVE-2006-4508 Fix available 4.0 MediumAugust 31, 2006
• tor Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of... CVE-2006-3419 Fix available 5.0 MediumJuly 7, 2006
• tor Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its... CVE-2006-3418 Fix available 5.0 MediumJuly 7, 2006
• tor Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could... CVE-2006-3417 Fix available 6.4 MediumJuly 7, 2006
• tor ** DISPUTED ** Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay... CVE-2006-3416 Fix availableDisputed 5.0 MediumJuly 7, 2006
• tor Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote... CVE-2006-3415 Fix available 6.4 MediumJuly 7, 2006
• tor Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses,... CVE-2006-3414 Fix available 5.0 MediumJuly 7, 2006
• tor The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via... CVE-2006-3413 Fix available 5.0 MediumJuly 7, 2006
• tor Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote... CVE-2006-3412 Fix available 6.4 MediumJuly 7, 2006
• tor TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather... CVE-2006-3411 Fix available 6.4 MediumJuly 7, 2006
• Show olderLoading…