Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-77642 (GCVE-0-2026-77642)

Vulnerability from nvd – Published: 2026-08-20 21:15 – Updated: 2026-08-27 16:07

Summary

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 16:03 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.2.8.2-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77642",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T16:03:17.038602Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T16:07:03.716Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.2.8.2-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.2.8.2-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tor before 0.4.9.9 was prone to an\u00a0out-of-bounds write when parsing a consensus or  detached signature with unexpected signature digest type. Impact  is minor for most Tor roles, but potentially major for directory   authorities. This is TROVE-2026-019."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T21:15:49.660Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77642",
    "datePublished": "2026-08-20T21:15:49.660Z",
    "dateReserved": "2026-08-20T21:15:49.322Z",
    "dateUpdated": "2026-08-27T16:07:03.716Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77641 (GCVE-0-2026-77641)

Vulnerability from nvd – Published: 2026-08-20 21:09 – Updated: 2026-08-27 16:06

Summary

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a send failure (which calls circuit_mark_for_close() and removes the leg via cfx_del_leg()) would go undetected, causing the caller to write to the now-freed current leg and resulting in a crash. This is TROVE-2026-017.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 15:47 UTC

CWE

CWE-252 - Unchecked Return Value

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.4.8.1-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77641",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T15:47:55.296047Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T16:06:56.149Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.4.8.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.4.8.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tor before 0.4.9.9 was prone to a\u00a0NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was   ignored, so a send failure (which calls circuit_mark_for_close()  and removes the leg via cfx_del_leg()) would go undetected, causing the caller to write to the now-freed current leg and resulting in a crash. This is TROVE-2026-017."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-252",
              "description": "CWE-252 Unchecked Return Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T21:09:41.229Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77641",
    "datePublished": "2026-08-20T21:09:41.229Z",
    "dateReserved": "2026-08-20T21:09:40.882Z",
    "dateUpdated": "2026-08-27T16:06:56.149Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77640 (GCVE-0-2026-77640)

Vulnerability from nvd – Published: 2026-08-20 21:02 – Updated: 2026-08-21 20:08

Summary

tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches Z_STREAM_END, causing zlib to return Z_BUF_ERROR with no input remaining, which buf_add_compress() mistook for a full output buffer and retried forever. Fixed by returning TOR_COMPRESS_ERROR in that case so the caller can abort cleanly. This is TROVE-2026-021.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-21 19:51 UTC

CWE

CWE-1284 - Improper Validation of Specified Quantity in Input

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.2.6.1-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77640",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-21T19:51:18.580818Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-21T20:08:38.526Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.2.6.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.2.6.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip  stream with done=1. A truncated stream never reaches Z_STREAM_END,  causing zlib to return Z_BUF_ERROR with no input remaining, which  buf_add_compress() mistook for a full output buffer and retried forever. Fixed by returning TOR_COMPRESS_ERROR in that case so the caller can abort cleanly. This is TROVE-2026-021."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1284",
              "description": "CWE-1284 Improper Validation of Specified Quantity in Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T21:02:36.470Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77640",
    "datePublished": "2026-08-20T21:02:36.470Z",
    "dateReserved": "2026-08-20T21:02:36.115Z",
    "dateUpdated": "2026-08-21T20:08:38.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77639 (GCVE-0-2026-77639)

Vulnerability from nvd – Published: 2026-08-20 20:57 – Updated: 2026-08-21 20:08

Summary

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-21 19:51 UTC

CWE

CWE-420 - Unprotected Alternate Channel

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.3.1.1-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77639",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-21T19:51:09.028997Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-21T20:08:38.672Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.3.1.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.3.1.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.9 was prone to a\u00a0compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-420",
              "description": "CWE-420 Unprotected Alternate Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:57:50.207Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77639",
    "datePublished": "2026-08-20T20:57:50.207Z",
    "dateReserved": "2026-08-20T20:57:49.855Z",
    "dateUpdated": "2026-08-21T20:08:38.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77638 (GCVE-0-2026-77638)

Vulnerability from nvd – Published: 2026-08-20 20:52 – Updated: 2026-08-27 16:06

Summary

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.

Severity

8.9 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 15:44 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.3.5.3-alpha , < 0.4.9.11 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77638",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T15:44:49.153588Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T16:06:47.809Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.11",
              "status": "affected",
              "version": "0.3.5.3-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.11",
                  "versionStartIncluding": "0.3.5.3-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:52:29.708Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.11/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77638",
    "datePublished": "2026-08-20T20:52:29.708Z",
    "dateReserved": "2026-08-20T20:52:29.384Z",
    "dateUpdated": "2026-08-27T16:06:47.809Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77587 (GCVE-0-2026-77587)

Vulnerability from nvd – Published: 2026-08-20 20:47 – Updated: 2026-08-25 19:09

Summary

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 19:08 UTC

CWE

CWE-911 - Improper Update of Reference Count

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.4.8.1-alpha , < 0.4.9.11 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77587",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T19:08:45.475220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T19:09:06.542Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.11",
              "status": "affected",
              "version": "0.4.8.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.11",
                  "versionStartIncluding": "0.4.8.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-911",
              "description": "CWE-911 Improper Update of Reference Count",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:47:39.964Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.11/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77587",
    "datePublished": "2026-08-20T20:47:39.964Z",
    "dateReserved": "2026-08-20T20:47:39.624Z",
    "dateUpdated": "2026-08-25T19:09:06.542Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77584 (GCVE-0-2026-77584)

Vulnerability from nvd – Published: 2026-08-20 20:38 – Updated: 2026-08-25 19:09

Summary

Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit back-pointer and a use-after-free (UAF) when the circuit is freed. This is TROVE-2026-025.

Severity

7 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 19:09 UTC

CWE

CWE-821 - Incorrect Synchronization

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.4.8.1-alpha , < 0.4.9.10 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77584",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T19:09:31.498439Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T19:09:53.308Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.10",
              "status": "affected",
              "version": "0.4.8.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.10",
                  "versionStartIncluding": "0.4.8.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit back-pointer and a use-after-free (UAF) when the circuit is freed. This is TROVE-2026-025."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-821",
              "description": "CWE-821 Incorrect Synchronization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:38:42.159Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.10/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77584",
    "datePublished": "2026-08-20T20:38:42.159Z",
    "dateReserved": "2026-08-20T20:38:41.768Z",
    "dateUpdated": "2026-08-25T19:09:53.308Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44603 (GCVE-0-2026-44603)

Vulnerability from nvd – Published: 2026-05-07 03:21 – Updated: 2026-05-07 14:58

Summary

Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 14:01 UTC

CWE

CWE-193 - Off-by-one Error

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44603",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T14:01:38.415268Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T14:58:13.900Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-193",
              "description": "CWE-193 Off-by-one Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:36:57.931Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41245"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/1703df3d439c83c2184e259fad1cfa19240f9c89"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44603",
    "datePublished": "2026-05-07T03:21:24.822Z",
    "dateReserved": "2026-05-07T03:21:24.363Z",
    "dateUpdated": "2026-05-07T14:58:13.900Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44602 (GCVE-0-2026-44602)

Vulnerability from nvd – Published: 2026-05-07 03:17 – Updated: 2026-05-07 14:58

Summary

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 14:54 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44602",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T14:54:09.669248Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T14:58:19.602Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:25:39.625Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41240"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/df7d5174ef41814d806c8ede776e230cd30ac12b"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44602",
    "datePublished": "2026-05-07T03:17:32.456Z",
    "dateReserved": "2026-05-07T03:17:32.092Z",
    "dateUpdated": "2026-05-07T14:58:19.602Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44601 (GCVE-0-2026-44601)

Vulnerability from nvd – Published: 2026-05-07 03:09 – Updated: 2026-05-07 14:58

Summary

Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 13:56 UTC

CWE

CWE-837 - Improper Enforcement of a Single, Unique Action

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44601",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T13:56:45.000287Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T14:58:24.830Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-837",
              "description": "CWE-837 Improper Enforcement of a Single, Unique Action",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:25:19.794Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41237"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/d4e3f6a440b58c2be661decf20c09548704907dc"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44601",
    "datePublished": "2026-05-07T03:09:51.106Z",
    "dateReserved": "2026-05-07T03:09:50.703Z",
    "dateUpdated": "2026-05-07T14:58:24.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44600 (GCVE-0-2026-44600)

Vulnerability from nvd – Published: 2026-05-07 02:20 – Updated: 2026-05-07 12:46

Summary

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 12:46 UTC

CWE

CWE-696 - Incorrect Behavior Order

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T12:46:45.347681Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T12:46:59.949Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-696",
              "description": "CWE-696 Incorrect Behavior Order",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:35:03.538Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41251"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/a198185ed863677d60eec120126730628dac35bb"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44600",
    "datePublished": "2026-05-07T02:20:51.250Z",
    "dateReserved": "2026-05-07T02:20:50.690Z",
    "dateUpdated": "2026-05-07T12:46:59.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44599 (GCVE-0-2026-44599)

Vulnerability from nvd – Published: 2026-05-07 02:11 – Updated: 2026-05-07 12:48

Summary

Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 12:47 UTC

CWE

CWE-669 - Incorrect Resource Transfer Between Spheres

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44599",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T12:47:28.922671Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T12:48:40.800Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-669",
              "description": "CWE-669 Incorrect Resource Transfer Between Spheres",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:24:37.843Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41243"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/50f90ba849088247734786922855c22661c6fa03"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44599",
    "datePublished": "2026-05-07T02:11:56.238Z",
    "dateReserved": "2026-05-07T02:11:55.866Z",
    "dateUpdated": "2026-05-07T12:48:40.800Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44597 (GCVE-0-2026-44597)

Vulnerability from nvd – Published: 2026-05-07 00:56 – Updated: 2026-05-07 13:12

Summary

Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 13:11 UTC

CWE

CWE-684 - Incorrect Provision of Specified Functionality

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44597",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T13:11:47.868794Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T13:12:29.516Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-684",
              "description": "CWE-684 Incorrect Provision of Specified Functionality",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:24:05.985Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41254"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/8f98054b1982d00a14639864d03e9afd90b87481"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44597",
    "datePublished": "2026-05-07T00:56:47.320Z",
    "dateReserved": "2026-05-07T00:56:46.891Z",
    "dateUpdated": "2026-05-07T13:12:29.516Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77642 (GCVE-0-2026-77642)

Vulnerability from cvelistv5 – Published: 2026-08-20 21:15 – Updated: 2026-08-27 16:07

Summary

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 16:03 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.2.8.2-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77642",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T16:03:17.038602Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T16:07:03.716Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.2.8.2-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.2.8.2-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tor before 0.4.9.9 was prone to an\u00a0out-of-bounds write when parsing a consensus or  detached signature with unexpected signature digest type. Impact  is minor for most Tor roles, but potentially major for directory   authorities. This is TROVE-2026-019."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T21:15:49.660Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77642",
    "datePublished": "2026-08-20T21:15:49.660Z",
    "dateReserved": "2026-08-20T21:15:49.322Z",
    "dateUpdated": "2026-08-27T16:07:03.716Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77641 (GCVE-0-2026-77641)

Vulnerability from cvelistv5 – Published: 2026-08-20 21:09 – Updated: 2026-08-27 16:06

Summary

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a send failure (which calls circuit_mark_for_close() and removes the leg via cfx_del_leg()) would go undetected, causing the caller to write to the now-freed current leg and resulting in a crash. This is TROVE-2026-017.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 15:47 UTC

CWE

CWE-252 - Unchecked Return Value

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.4.8.1-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77641",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T15:47:55.296047Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T16:06:56.149Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.4.8.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.4.8.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tor before 0.4.9.9 was prone to a\u00a0NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was   ignored, so a send failure (which calls circuit_mark_for_close()  and removes the leg via cfx_del_leg()) would go undetected, causing the caller to write to the now-freed current leg and resulting in a crash. This is TROVE-2026-017."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-252",
              "description": "CWE-252 Unchecked Return Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T21:09:41.229Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77641",
    "datePublished": "2026-08-20T21:09:41.229Z",
    "dateReserved": "2026-08-20T21:09:40.882Z",
    "dateUpdated": "2026-08-27T16:06:56.149Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77640 (GCVE-0-2026-77640)

Vulnerability from cvelistv5 – Published: 2026-08-20 21:02 – Updated: 2026-08-21 20:08

Summary

tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches Z_STREAM_END, causing zlib to return Z_BUF_ERROR with no input remaining, which buf_add_compress() mistook for a full output buffer and retried forever. Fixed by returning TOR_COMPRESS_ERROR in that case so the caller can abort cleanly. This is TROVE-2026-021.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-21 19:51 UTC

CWE

CWE-1284 - Improper Validation of Specified Quantity in Input

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.2.6.1-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77640",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-21T19:51:18.580818Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-21T20:08:38.526Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.2.6.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.2.6.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip  stream with done=1. A truncated stream never reaches Z_STREAM_END,  causing zlib to return Z_BUF_ERROR with no input remaining, which  buf_add_compress() mistook for a full output buffer and retried forever. Fixed by returning TOR_COMPRESS_ERROR in that case so the caller can abort cleanly. This is TROVE-2026-021."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1284",
              "description": "CWE-1284 Improper Validation of Specified Quantity in Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T21:02:36.470Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77640",
    "datePublished": "2026-08-20T21:02:36.470Z",
    "dateReserved": "2026-08-20T21:02:36.115Z",
    "dateUpdated": "2026-08-21T20:08:38.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77639 (GCVE-0-2026-77639)

Vulnerability from cvelistv5 – Published: 2026-08-20 20:57 – Updated: 2026-08-21 20:08

Summary

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-21 19:51 UTC

CWE

CWE-420 - Unprotected Alternate Channel

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.3.1.1-alpha , < 0.4.9.9 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77639",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-21T19:51:09.028997Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-21T20:08:38.672Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.9",
              "status": "affected",
              "version": "0.3.1.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.9",
                  "versionStartIncluding": "0.3.1.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.9 was prone to a\u00a0compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-420",
              "description": "CWE-420 Unprotected Alternate Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:57:50.207Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.9/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77639",
    "datePublished": "2026-08-20T20:57:50.207Z",
    "dateReserved": "2026-08-20T20:57:49.855Z",
    "dateUpdated": "2026-08-21T20:08:38.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77638 (GCVE-0-2026-77638)

Vulnerability from cvelistv5 – Published: 2026-08-20 20:52 – Updated: 2026-08-27 16:06

Summary

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.

Severity

8.9 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 15:44 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.3.5.3-alpha , < 0.4.9.11 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77638",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T15:44:49.153588Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T16:06:47.809Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.11",
              "status": "affected",
              "version": "0.3.5.3-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.11",
                  "versionStartIncluding": "0.3.5.3-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:52:29.708Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.11/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77638",
    "datePublished": "2026-08-20T20:52:29.708Z",
    "dateReserved": "2026-08-20T20:52:29.384Z",
    "dateUpdated": "2026-08-27T16:06:47.809Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77587 (GCVE-0-2026-77587)

Vulnerability from cvelistv5 – Published: 2026-08-20 20:47 – Updated: 2026-08-25 19:09

Summary

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 19:08 UTC

CWE

CWE-911 - Improper Update of Reference Count

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.4.8.1-alpha , < 0.4.9.11 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77587",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T19:08:45.475220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T19:09:06.542Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.11",
              "status": "affected",
              "version": "0.4.8.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.11",
                  "versionStartIncluding": "0.4.8.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-911",
              "description": "CWE-911 Improper Update of Reference Count",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:47:39.964Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.11/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77587",
    "datePublished": "2026-08-20T20:47:39.964Z",
    "dateReserved": "2026-08-20T20:47:39.624Z",
    "dateUpdated": "2026-08-25T19:09:06.542Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77584 (GCVE-0-2026-77584)

Vulnerability from cvelistv5 – Published: 2026-08-20 20:38 – Updated: 2026-08-25 19:09

Summary

Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit back-pointer and a use-after-free (UAF) when the circuit is freed. This is TROVE-2026-025.

Severity

7 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 19:09 UTC

CWE

CWE-821 - Incorrect Synchronization

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://gitlab.torproject.org/tpo/core/tor/-/raw/…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0.4.8.1-alpha , < 0.4.9.10 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77584",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T19:09:31.498439Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T19:09:53.308Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.10",
              "status": "affected",
              "version": "0.4.8.1-alpha",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.10",
                  "versionStartIncluding": "0.4.8.1-alpha",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit back-pointer and a use-after-free (UAF) when the circuit is freed. This is TROVE-2026-025."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-821",
              "description": "CWE-821 Incorrect Synchronization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-20T20:38:42.159Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.10/ChangeLog"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-77584",
    "datePublished": "2026-08-20T20:38:42.159Z",
    "dateReserved": "2026-08-20T20:38:41.768Z",
    "dateUpdated": "2026-08-25T19:09:53.308Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44603 (GCVE-0-2026-44603)

Vulnerability from cvelistv5 – Published: 2026-05-07 03:21 – Updated: 2026-05-07 14:58

Summary

Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 14:01 UTC

CWE

CWE-193 - Off-by-one Error

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44603",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T14:01:38.415268Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T14:58:13.900Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-193",
              "description": "CWE-193 Off-by-one Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:36:57.931Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41245"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/1703df3d439c83c2184e259fad1cfa19240f9c89"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44603",
    "datePublished": "2026-05-07T03:21:24.822Z",
    "dateReserved": "2026-05-07T03:21:24.363Z",
    "dateUpdated": "2026-05-07T14:58:13.900Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44602 (GCVE-0-2026-44602)

Vulnerability from cvelistv5 – Published: 2026-05-07 03:17 – Updated: 2026-05-07 14:58

Summary

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 14:54 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44602",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T14:54:09.669248Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T14:58:19.602Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:25:39.625Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41240"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/df7d5174ef41814d806c8ede776e230cd30ac12b"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44602",
    "datePublished": "2026-05-07T03:17:32.456Z",
    "dateReserved": "2026-05-07T03:17:32.092Z",
    "dateUpdated": "2026-05-07T14:58:19.602Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44601 (GCVE-0-2026-44601)

Vulnerability from cvelistv5 – Published: 2026-05-07 03:09 – Updated: 2026-05-07 14:58

Summary

Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 13:56 UTC

CWE

CWE-837 - Improper Enforcement of a Single, Unique Action

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44601",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T13:56:45.000287Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T14:58:24.830Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-837",
              "description": "CWE-837 Improper Enforcement of a Single, Unique Action",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:25:19.794Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41237"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/d4e3f6a440b58c2be661decf20c09548704907dc"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44601",
    "datePublished": "2026-05-07T03:09:51.106Z",
    "dateReserved": "2026-05-07T03:09:50.703Z",
    "dateUpdated": "2026-05-07T14:58:24.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44600 (GCVE-0-2026-44600)

Vulnerability from cvelistv5 – Published: 2026-05-07 02:20 – Updated: 2026-05-07 12:46

Summary

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 12:46 UTC

CWE

CWE-696 - Incorrect Behavior Order

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T12:46:45.347681Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T12:46:59.949Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-696",
              "description": "CWE-696 Incorrect Behavior Order",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:35:03.538Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41251"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/a198185ed863677d60eec120126730628dac35bb"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44600",
    "datePublished": "2026-05-07T02:20:51.250Z",
    "dateReserved": "2026-05-07T02:20:50.690Z",
    "dateUpdated": "2026-05-07T12:46:59.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44599 (GCVE-0-2026-44599)

Vulnerability from cvelistv5 – Published: 2026-05-07 02:11 – Updated: 2026-05-07 12:48

Summary

Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 12:47 UTC

CWE

CWE-669 - Incorrect Resource Transfer Between Spheres

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44599",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T12:47:28.922671Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T12:48:40.800Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-669",
              "description": "CWE-669 Incorrect Resource Transfer Between Spheres",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:24:37.843Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41243"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/50f90ba849088247734786922855c22661c6fa03"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44599",
    "datePublished": "2026-05-07T02:11:56.238Z",
    "dateReserved": "2026-05-07T02:11:55.866Z",
    "dateUpdated": "2026-05-07T12:48:40.800Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44597 (GCVE-0-2026-44597)

Vulnerability from cvelistv5 – Published: 2026-05-07 00:56 – Updated: 2026-05-07 13:12

Summary

Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-07 13:11 UTC

CWE

CWE-684 - Incorrect Provision of Specified Functionality

Assigner

mitre mitre root

References

4 references

URL	Tags
https://forum.torproject.org/c/news/tor-release-a…
https://www.openwall.com/lists/oss-security/2026/…
https://gitlab.torproject.org/tpo/core/tor/-/work…
https://gitlab.torproject.org/tpo/core/tor/-/comm…

Impacted products

1 product

Vendor	Product	Version
torproject	Tor	Affected: 0 , < 0.4.9.7 (custom) cpe:2.3:a:torproject:tor::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44597",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-07T13:11:47.868794Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-07T13:12:29.516Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tor",
          "vendor": "torproject",
          "versions": [
            {
              "lessThan": "0.4.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "0.4.9.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-684",
              "description": "CWE-684 Incorrect Provision of Specified Functionality",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T03:24:05.985Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://forum.torproject.org/c/news/tor-release-announcement/28"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/05/06/8"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/work_items/41254"
        },
        {
          "url": "https://gitlab.torproject.org/tpo/core/tor/-/commit/8f98054b1982d00a14639864d03e9afd90b87481"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-44597",
    "datePublished": "2026-05-07T00:56:47.320Z",
    "dateReserved": "2026-05-07T00:56:46.891Z",
    "dateUpdated": "2026-05-07T13:12:29.516Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

VAR-201709-0618

Vulnerability from variot - Updated: 2025-04-20 23:23

The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit. Tor Contains a vulnerability related to information disclosure from log files.Information may be obtained. Tor is an implementation of the second generation of onion routing, which is mainly used to access the Internet anonymously. Tor is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

Debian Security Advisory DSA-3993-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff October 06, 2017 https://www.debian.org/security/faq

Package : tor CVE ID : CVE-2017-0380

It was discovered that the Tor onion service could leak sensitive information to log files if the "SafeLogging" option is set to "0".

The oldstable distribution (jessie) is not affected.

For the stable distribution (stretch), this problem has been fixed in version 0.2.9.12-1.

We recommend that you upgrade your tor packages.

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlnX+bUACgkQEMKTtsN8 Tjb5ehAAnG7JAqEQtjrUAenUy9wZtmsqA5AtFf6goHCw9uYZ0Co2rAZbRQYKeerw z9TtW/gyKZdYSmY2jd82E9rJTHfuNX7J37LIfNqb8CMLf+eW5shnqghPX+R+MfXU q99ufaKpdDrK8ZRg3ECXpvHXLyzgYvlm8KAX/6bnv0Kt6nNvE3LCDSXvDjGcGuX/ VEnfZMk6GnxlIp/op3uXPYQYKm7BrModTMx7iKoTlBwhdlxh8MwTBsrEH+aQvIUo ZCqqOdU31Av6OngBmIwnkFPq/4FjXvS/lkmpXP6y6g7RCIAc8yf72wk0lNR5OqBX 2svQyr5ZqBH3fCM9eSDUV4nBvC8xUEETZQpMZRUqlF/SJcO33Jh+R+UE3HHh1Imy ozoxnx+qiKUWoUuSXnPCetXKaWH3alJXkp2JDsmoSAVwW/VBeGylsuQ2nAeYTcOb fdpXRqrL+w/w7VXCIAJ3bCN5N8j6otRtMUAntHgXfqxx72Zk5MQrco7aiPvLzten VyKYFxQiRcBV/JFR37Unklkgf4TNxwXhgVe8M6AiVvyyRcH0v8zEKn7HX53h+fSM W27BweGIE9qpOQlo1m8XiQml/3J8aJhAbvuwRoIoiwKb9Xos6+YdxCqDOJiFArk3 ozt2+7pKmawWD3dJotVIu8tOMOC8lYdP5H0YLy6Qt3X3+zm1x3g= =7kef -----END PGP SIGNATURE-----

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201709-0618",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "torproject",
        "version": "0.3.1.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "torproject",
        "version": "0.3.0.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.1.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.1.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.0.9"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.0.8"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.1.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.1.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.3.1.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.3.0.0"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.9.11"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.9.0"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.3.0.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.1"
      },
      {
        "model": "tor",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.8.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.8"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.9"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.3.0.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.3.0.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.3.0.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.3.0.7"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.9.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.3.0.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.3.0.3"
      },
      {
        "model": "tor",
        "scope": null,
        "trust": 0.8,
        "vendor": "the tor",
        "version": null
      },
      {
        "model": "tor",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "tor",
        "version": "0.2.8.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tor",
        "version": "0.2.9.*,\u003c0.2.9.12"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tor",
        "version": "0.3.0.*,\u003c0.3.0.11"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tor",
        "version": "0.3.1.*,\u003c0.3.1.7"
      },
      {
        "model": "0.3.2.*,\u003c0.3.2.1-alpha",
        "scope": null,
        "trust": 0.6,
        "vendor": "tor",
        "version": null
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.3.1.0"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.8.14"
      },
      {
        "model": "linux sparc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux s/390",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux powerpc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux mips",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux ia-64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux ia-32",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux arm",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux amd64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "tor 0.3.2.1-alpha",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "torproject",
        "version": null
      },
      {
        "model": "tor",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.3.1.7"
      },
      {
        "model": "tor",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.3.0.11"
      },
      {
        "model": "tor",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.9.12"
      },
      {
        "model": "tor",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.8.15"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "db": "BID",
        "id": "101222"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:torproject:tor",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The vendor reported this issue.",
    "sources": [
      {
        "db": "BID",
        "id": "101222"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2017-0380",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2017-0380",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CNVD-2017-34623",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2017-0380",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2017-0380",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2017-0380",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2017-34623",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201709-858",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit. Tor Contains a vulnerability related to information disclosure from log files.Information may be obtained. Tor is an implementation of the second generation of onion routing, which is mainly used to access the Internet anonymously. Tor is prone to an information-disclosure vulnerability. \nAttackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. \n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3993-1                   security@debian.org\nhttps://www.debian.org/security/                       Moritz Muehlenhoff\nOctober 06, 2017                      https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage        : tor\nCVE ID         : CVE-2017-0380\n\nIt was discovered that the Tor onion service could leak sensitive\ninformation to log files if the \"SafeLogging\" option is set to \"0\". \n\nThe oldstable distribution (jessie) is not affected. \n\nFor the stable distribution (stretch), this problem has been fixed in\nversion 0.2.9.12-1. \n\nWe recommend that you upgrade your tor packages. \n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n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\nozt2+7pKmawWD3dJotVIu8tOMOC8lYdP5H0YLy6Qt3X3+zm1x3g=\n=7kef\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2017-0380"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "db": "BID",
        "id": "101222"
      },
      {
        "db": "PACKETSTORM",
        "id": "144540"
      }
    ],
    "trust": 2.52
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2017-0380",
        "trust": 3.4
      },
      {
        "db": "SECTRACK",
        "id": "1039519",
        "trust": 1.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623",
        "trust": 0.6
      },
      {
        "db": "NSFOCUS",
        "id": "37666",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "101222",
        "trust": 0.3
      },
      {
        "db": "PACKETSTORM",
        "id": "144540",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "db": "BID",
        "id": "101222"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "PACKETSTORM",
        "id": "144540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "id": "VAR-201709-0618",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      }
    ],
    "trust": 1.6
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "IoT"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      }
    ]
  },
  "last_update_date": "2025-04-20T23:23:36.659000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Fix log-uninitialized-stack bug in rend_service_intro_established.",
        "trust": 0.8,
        "url": "https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486"
      },
      {
        "title": "Fix TROVE-2017-008: Stack disclosure in hidden services logs when SafeLogging disabled",
        "trust": 0.8,
        "url": "https://trac.torproject.org/projects/tor/ticket/23490"
      },
      {
        "title": "Patch for Tor \u0027rend_service_intro_established\u0027 function sensitive information disclosure vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/106424"
      },
      {
        "title": "Tor Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=74964"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-532",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.9,
        "url": "https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486"
      },
      {
        "trust": 1.9,
        "url": "https://trac.torproject.org/projects/tor/ticket/23490"
      },
      {
        "trust": 1.0,
        "url": "http://www.securitytracker.com/id/1039519"
      },
      {
        "trust": 1.0,
        "url": "http://www.debian.org/security/2017/dsa-3993"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-0380"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-0380"
      },
      {
        "trust": 0.6,
        "url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-0380"
      },
      {
        "trust": 0.6,
        "url": "http://www.nsfocus.net/vulndb/37666"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1493513"
      },
      {
        "trust": 0.3,
        "url": "https://www.torproject.org/index.html.en"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "db": "BID",
        "id": "101222"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "PACKETSTORM",
        "id": "144540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "db": "BID",
        "id": "101222"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "db": "PACKETSTORM",
        "id": "144540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-11-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "date": "2017-09-18T00:00:00",
        "db": "BID",
        "id": "101222"
      },
      {
        "date": "2017-10-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "date": "2017-10-09T15:42:49",
        "db": "PACKETSTORM",
        "id": "144540"
      },
      {
        "date": "2017-09-19T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      },
      {
        "date": "2017-09-18T16:29:00.207000",
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-11-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2017-34623"
      },
      {
        "date": "2017-09-18T00:00:00",
        "db": "BID",
        "id": "101222"
      },
      {
        "date": "2017-10-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      },
      {
        "date": "2017-09-19T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      },
      {
        "date": "2025-04-20T01:37:25.860000",
        "db": "NVD",
        "id": "CVE-2017-0380"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Tor Vulnerable to information disclosure from log files",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008306"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "lack of information",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201709-858"
      }
    ],
    "trust": 0.6
  }
}

VAR-201402-0034

Vulnerability from variot - Updated: 2025-04-11 23:20

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly. Tor (The Onion Router) is an implementation of the second generation of onion routing, mainly used for anonymous access to the Internet. The application is prone to a remote denial-of-service vulnerability. Attackers may exploit this issue to cause an affected application to crash, resulting in a denial-of-service condition. Versions prior to Tor 0.2.4.4-alpha are vulnerable

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201402-0034",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.1.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.38"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.37"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.36"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.35"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.34"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.33"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.32"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.31"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.30"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.29"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.28"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.27"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.26"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.22"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.2.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.2.0.30"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.2.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.2.18"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.2.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.2.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.2.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.2.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.2.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.1.26"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.1.25"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.1.24"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.1.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.1.22"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.1.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.12"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.11"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.1.0.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.9"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.8"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.7"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.9.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.8.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.7.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.7.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.7.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.7"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.6.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.6.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "torproject",
        "version": "0.0.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.31"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.22"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.24"
      },
      {
        "model": "tor",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.34"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.32"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.25"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.33"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.18"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.35"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.18"
      },
      {
        "model": "tor",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "the tor",
        "version": "0.2.3.24-rc"
      },
      {
        "model": "tor \u003c0.2.3.24-rc",
        "scope": null,
        "trust": 0.6,
        "vendor": "torproject",
        "version": null
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "torproject",
        "version": "0.2.3.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.225"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.224"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.35"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.34"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.33"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.32"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.31"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.4.19"
      },
      {
        "model": "tor rc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.23"
      },
      {
        "model": "tor rc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.22"
      },
      {
        "model": "tor rc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.21"
      },
      {
        "model": "tor rc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.20"
      },
      {
        "model": "tor rc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.19"
      },
      {
        "model": "tor rc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.18"
      },
      {
        "model": "tor beta",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.17"
      },
      {
        "model": "tor alpha",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.16"
      },
      {
        "model": "tor alpha",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.15"
      },
      {
        "model": "tor alpha",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.14"
      },
      {
        "model": "tor alpha",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.3.13"
      },
      {
        "model": "tor pre27",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre26",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre25",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre24",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre23",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre22",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre21",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre20",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre19",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre18",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre17",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre16",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre15",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre14",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor pre13",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor alpha",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "torproject",
        "version": "0.2.4.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "db": "BID",
        "id": "65356"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:torproject:tor",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The vendor reported this issue.",
    "sources": [
      {
        "db": "BID",
        "id": "65356"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2012-2250",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2012-2250",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2014-00703",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2012-2250",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2012-2250",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2014-00703",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201402-016",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly. Tor (The Onion Router) is an implementation of the second generation of onion routing, mainly used for anonymous access to the Internet. The application is prone to a remote denial-of-service vulnerability. \nAttackers may exploit this issue to cause an affected application to crash, resulting in a denial-of-service condition. \nVersions prior to Tor 0.2.4.4-alpha are vulnerable",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-2250"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "db": "BID",
        "id": "65356"
      }
    ],
    "trust": 2.43
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2012-2250",
        "trust": 3.3
      },
      {
        "db": "BID",
        "id": "65356",
        "trust": 0.9
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "db": "BID",
        "id": "65356"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "id": "VAR-201402-0034",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      }
    ],
    "trust": 0.06
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      }
    ]
  },
  "last_update_date": "2025-04-11T23:20:33.209000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Bug 1060768",
        "trust": 0.8,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060768"
      },
      {
        "title": "ChangeLog",
        "trust": 0.8,
        "url": "https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog"
      },
      {
        "title": "Patch for Tor Remote Denial of Service Vulnerability (CNVD-2014-00703)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/43275"
      },
      {
        "title": "tor-0.2.3.24-rc",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=47816"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.5,
        "url": "https://gitweb.torproject.org/tor.git?a=blob_plain;hb=head;f=changelog"
      },
      {
        "trust": 1.0,
        "url": "https://gitweb.torproject.org/tor.git?a=blob_plain%3bhb=head%3bf=changelog"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-2250"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-2250"
      },
      {
        "trust": 0.8,
        "url": "http://debian.2.n7.nabble.com/bug-691499-unblock-tor-0-2-3-24-rc-1-td2788119.html"
      },
      {
        "trust": 0.3,
        "url": "https://www.torproject.org/index.html.en"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "db": "BID",
        "id": "65356"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "db": "BID",
        "id": "65356"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2014-02-11T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "date": "2012-10-25T00:00:00",
        "db": "BID",
        "id": "65356"
      },
      {
        "date": "2014-02-04T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "date": "2014-02-08T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      },
      {
        "date": "2014-02-03T03:55:03.660000",
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2014-02-11T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2014-00703"
      },
      {
        "date": "2012-10-25T00:00:00",
        "db": "BID",
        "id": "65356"
      },
      {
        "date": "2014-02-04T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      },
      {
        "date": "2014-02-08T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      },
      {
        "date": "2025-04-11T00:51:21.963000",
        "db": "NVD",
        "id": "CVE-2012-2250"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Tor Service disruption in  (DoS) Vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-006130"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "lack of information",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201402-016"
      }
    ],
    "trust": 0.6
  }
}

VAR-201209-0412

Vulnerability from variot - Updated: 2025-04-11 22:49

The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison. Tor (The Onion Router) is an implementation of the second generation of onion routing, which allows users to communicate anonymously over the Internet. Tor has denial of service and security restrictions to bypass the vulnerability, which can allow an attacker to bypass certain security restrictions or cause a denial of service. Tor is prone to multiple denial-of-service vulnerabilities. Exploiting these issues can allow attackers to crash the affected computer, denying service to legitimate users. Versions prior to Tor 0.2.2.39 and 0.2.3.22-rc are vulnerable. The title and technical details have been changed to better reflect the underlying component affected. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Mandriva Linux Security Advisory MDVSA-2013:132 http://www.mandriva.com/en/support/security/

Package : tor Date : April 10, 2013 Affected: Business Server 1.0

Problem Description:

Updated tor package fixes security vulnerabilities:

Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected (CVE-2011-2768).

Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values (CVE-2011-2769).

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack (CVE-2012-3519).

Tor before 0.2.2.39, when waiting for a client to renegotiate, allowed it to add bytes to the input buffer, allowing a crash to be caused remotely (tor-5934, tor-6007).

The version of Tor shipped in MBS1 did not have correctly formed systemd unit and thus failed to start.

This updated version corrects this problem and restores working behaviour.

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2768 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2769 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3517 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3518 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3519 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4419 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5573 https://wiki.mageia.org/en/Support/Advisories/MGAA-2012-0184 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0276 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0356

Updated Packages:

Mandriva Business Server 1/X86_64: 8cadc920e4452cd2a3551a3cb01d9fcf mbs1/x86_64/tor-0.2.2.39-1.mbs1.x86_64.rpm 7cbba7170bc4f9e6ee8409398437570c mbs1/SRPMS/tor-0.2.2.39-1.mbs1.src.rpm

To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com

Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFRZVsDmqjQ0CJFipgRAm9IAJ9tYUVrI7u2V+7yJGNLn2OVMdOzcACgyrhf PUIroe88x4NDpj7AUyd2YP8= =x4YG -----END PGP SIGNATURE-----

. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201301-03

                                        http://security.gentoo.org/

Severity: Normal Title: Tor: Multiple vulnerabilities Date: January 08, 2013 Bugs: #432188, #434882, #444804 ID: 201301-03

Synopsis

Multiple vulnerabilities have been found in Tor, allowing attackers to cause Denial of Service or obtain sensitive information.

Affected packages

-------------------------------------------------------------------
 Package              /     Vulnerable     /            Unaffected
-------------------------------------------------------------------

1 net-misc/tor < 0.2.3.25 >= 0.2.3.25

Description

Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details.

Workaround

There is no known workaround at this time.

Resolution

All Tor users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/tor-0.2.3.25"

References

[ 1 ] CVE-2012-3517 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3517 [ 2 ] CVE-2012-3518 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3518 [ 3 ] CVE-2012-3519 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3519 [ 4 ] CVE-2012-4419 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4419 [ 5 ] CVE-2012-4922 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4922 [ 6 ] CVE-2012-5573 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5573

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201301-03.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

License

The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5 .

CVE-2012-3518

Avoid an uninitialised memory read when reading a vote or consensus document that has an unrecognized flavour name.

CVE-2012-3519

Try to leak less information about what relays a client is choosing to a side-channel attacker. This fixes a potential DoS issue [tor-5934, tor-6007].

For the stable distribution (squeeze), these problems have been fixed in version 0.2.2.39-1.

For the unstable distribution, these problems have been fixed in version 0.2.3.22-rc-1.

We recommend that you upgrade your tor packages. ----------------------------------------------------------------------

The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/

TITLE: Tor Two Assertion Failure Denial of Service Vulnerabilities

SECUNIA ADVISORY ID: SA50578

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50578/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50578

RELEASE DATE: 2012-09-14

DISCUSS ADVISORY: http://secunia.com/advisories/50578/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/50578/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=50578

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION: Two vulnerabilities have been reported in Tor, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An assertion failure within the "tor_timegm()" function when handling time information within a directory object can be exploited to cause a crash.

2) An assertion failure within the "compare_tor_addr_to_addr_policy()" function when handling certain port values can be exploited to crash directory authorities.

SOLUTION: Update to version 0.2.2.39.

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

ORIGINAL ADVISORY: https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes

OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201209-0412",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.1.22"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.1.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.1.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.11"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.12"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.31"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.26"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.7"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.0.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.28"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.37"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.35"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.6.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.30"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.31"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.24"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.24"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.25"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.6.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.8"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.9"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.36"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.8.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.34"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.34"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.22"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.18"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.32"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.32"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.29"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.27"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.25"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.33"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.18"
      },
      {
        "model": "tor",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.38"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.35"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.33"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.30"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.18"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.26"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "the tor",
        "version": "0.2.3.21-rc"
      },
      {
        "model": "tor",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "the tor",
        "version": "0.2.3.x"
      },
      {
        "model": "hat fedora",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "red",
        "version": "13"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:torproject:tor",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Reported by the vendor",
    "sources": [
      {
        "db": "BID",
        "id": "55519"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2012-4419",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2012-4419",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.1,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2012-7649",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2012-4419",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2012-4419",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2012-7649",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201209-318",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison. Tor (The Onion Router) is an implementation of the second generation of onion routing, which allows users to communicate anonymously over the Internet. Tor has denial of service and security restrictions to bypass the vulnerability, which can allow an attacker to bypass certain security restrictions or cause a denial of service. Tor is prone to multiple denial-of-service vulnerabilities. \nExploiting these issues can allow attackers to crash the affected computer, denying service to legitimate users. \nVersions prior to Tor 0.2.2.39 and 0.2.3.22-rc are vulnerable. The title and technical details have been changed to better reflect the underlying component affected. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n _______________________________________________________________________\n\n Mandriva Linux Security Advisory                         MDVSA-2013:132\n http://www.mandriva.com/en/support/security/\n _______________________________________________________________________\n\n Package : tor\n Date    : April 10, 2013\n Affected: Business Server 1.0\n _______________________________________________________________________\n\n Problem Description:\n\n Updated tor package fixes security vulnerabilities:\n \n Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS\n certificate chain as part of an outgoing OR connection, which allows\n remote relays to bypass intended anonymity properties by reading this\n chain and then determining the set of entry guards that the client\n or bridge had selected (CVE-2011-2768). \n \n Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE\n and CREATE_FAST values in the Command field of a cell within an OR\n connection that it initiated, which allows remote relays to enumerate\n bridges by using these values (CVE-2011-2769). \n \n routerlist.c in Tor before 0.2.2.38 uses a different amount of time\n for relay-list iteration depending on which relay is chosen, which\n might allow remote attackers to obtain sensitive information about\n relay selection via a timing side-channel attack (CVE-2012-3519). \n \n Tor before 0.2.2.39, when waiting for a client to renegotiate, allowed\n it to add bytes to the input buffer, allowing a crash to be caused\n remotely (tor-5934, tor-6007). \n \n The version of Tor shipped in MBS1 did not have correctly formed\n systemd unit and thus failed to start. \n \n This updated version corrects this problem and restores working\n behaviour. \n _______________________________________________________________________\n\n References:\n\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2768\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2769\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3517\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3518\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3519\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4419\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5573\n https://wiki.mageia.org/en/Support/Advisories/MGAA-2012-0184\n https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0276\n https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0356\n _______________________________________________________________________\n\n Updated Packages:\n\n Mandriva Business Server 1/X86_64:\n 8cadc920e4452cd2a3551a3cb01d9fcf  mbs1/x86_64/tor-0.2.2.39-1.mbs1.x86_64.rpm \n 7cbba7170bc4f9e6ee8409398437570c  mbs1/SRPMS/tor-0.2.2.39-1.mbs1.src.rpm\n _______________________________________________________________________\n\n To upgrade automatically use MandrivaUpdate or urpmi.  The verification\n of md5 checksums and GPG signatures is performed automatically for you. \n\n All packages are signed by Mandriva for security.  You can obtain the\n GPG public key of the Mandriva Security Team by executing:\n\n  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98\n\n You can view other update advisories for Mandriva Linux at:\n\n  http://www.mandriva.com/en/support/security/advisories/\n\n If you want to report vulnerabilities, please contact\n\n  security_(at)_mandriva.com\n _______________________________________________________________________\n\n Type Bits/KeyID     Date       User ID\n pub  1024D/22458A98 2000-07-10 Mandriva Security Team\n  \u003csecurity*mandriva.com\u003e\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.12 (GNU/Linux)\n\niD8DBQFRZVsDmqjQ0CJFipgRAm9IAJ9tYUVrI7u2V+7yJGNLn2OVMdOzcACgyrhf\nPUIroe88x4NDpj7AUyd2YP8=\n=x4YG\n-----END PGP SIGNATURE-----\n\n\n. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory                           GLSA 201301-03\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n                                            http://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n    Title: Tor: Multiple vulnerabilities\n     Date: January 08, 2013\n     Bugs: #432188, #434882, #444804\n       ID: 201301-03\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in Tor, allowing attackers to\ncause Denial of Service or obtain sensitive information. \n\nAffected packages\n=================\n\n    -------------------------------------------------------------------\n     Package              /     Vulnerable     /            Unaffected\n    -------------------------------------------------------------------\n  1  net-misc/tor                \u003c 0.2.3.25               \u003e= 0.2.3.25\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in Tor. Please review the\nCVE identifiers referenced below for details. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Tor users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=net-misc/tor-0.2.3.25\"\n\nReferences\n==========\n\n[ 1 ] CVE-2012-3517\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3517\n[ 2 ] CVE-2012-3518\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3518\n[ 3 ] CVE-2012-3519\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3519\n[ 4 ] CVE-2012-4419\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4419\n[ 5 ] CVE-2012-4922\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4922\n[ 6 ] CVE-2012-5573\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5573\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201301-03.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2013 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n. \n\nCVE-2012-3518\n\n  Avoid an uninitialised memory read when reading a vote or consensus\n  document that has an unrecognized flavour name. \n\nCVE-2012-3519\n\n  Try to leak less information about what relays a client is choosing to\n  a side-channel attacker. This fixes a potential DoS issue\n  [tor-5934, tor-6007]. \n\nFor the stable distribution (squeeze), these problems have been fixed in\nversion 0.2.2.39-1. \n\nFor the unstable distribution, these problems have been fixed in version\n0.2.3.22-rc-1. \n\nWe recommend that you upgrade your tor packages. ----------------------------------------------------------------------\n\nThe final version of the CSI 6.0 has been released. \nFind out why this is not just another Patch Management solution: http://secunia.com/blog/325/\n\n----------------------------------------------------------------------\n\nTITLE:\nTor Two Assertion Failure Denial of Service Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA50578\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/50578/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=50578\n\nRELEASE DATE:\n2012-09-14\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/50578/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/50578/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=50578\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nTwo vulnerabilities have been reported in Tor, which can be exploited\nby malicious people to cause a DoS (Denial of Service). \n\n1) An assertion failure within the \"tor_timegm()\" function when\nhandling time information within a directory object can be exploited\nto cause a crash. \n\n2) An assertion failure within the\n\"compare_tor_addr_to_addr_policy()\" function when handling certain\nport values can be exploited to crash directory authorities. \n\nSOLUTION:\nUpdate to version 0.2.2.39. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nhttps://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-4419"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "PACKETSTORM",
        "id": "121258"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "db": "PACKETSTORM",
        "id": "116520"
      },
      {
        "db": "PACKETSTORM",
        "id": "116554"
      },
      {
        "db": "PACKETSTORM",
        "id": "116570"
      }
    ],
    "trust": 2.88
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2012-4419",
        "trust": 3.0
      },
      {
        "db": "SECUNIA",
        "id": "50583",
        "trust": 1.7
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2012/09/13/2",
        "trust": 1.6
      },
      {
        "db": "BID",
        "id": "55519",
        "trust": 0.9
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415",
        "trust": 0.8
      },
      {
        "db": "SECUNIA",
        "id": "50578",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649",
        "trust": 0.6
      },
      {
        "db": "MLIST",
        "id": "[OSS-SECURITY] 20120912 RE: CVE ID REQUEST: TOR",
        "trust": 0.6
      },
      {
        "db": "MLIST",
        "id": "[TOR-TALK] 20120905 TOR 0.2.3.21-RC IS OUT",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "121258",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "119351",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "116520",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "116554",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "116570",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "db": "PACKETSTORM",
        "id": "121258"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "db": "PACKETSTORM",
        "id": "116520"
      },
      {
        "db": "PACKETSTORM",
        "id": "116554"
      },
      {
        "db": "PACKETSTORM",
        "id": "116570"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "id": "VAR-201209-0412",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      }
    ],
    "trust": 0.06
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      }
    ]
  },
  "last_update_date": "2025-04-11T22:49:24.472000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "openSUSE-SU-2012:1278",
        "trust": 0.8,
        "url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html"
      },
      {
        "title": "Do not assert when comparing a null address/port against a policy",
        "trust": 0.8,
        "url": "https://gitweb.torproject.org/tor.git/commit/62d96284f7e0f81c40d5df7e53dd7b4dfe7e56a5"
      },
      {
        "title": "[tor-talk] Tor 0.2.3.21-rc is out",
        "trust": 0.8,
        "url": "https://lists.torproject.org/pipermail/tor-talk/2012-September/025434.html"
      },
      {
        "title": "[tor.git] / ReleaseNotes (bump to 0.2.2.39)",
        "trust": 0.8,
        "url": "https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes"
      },
      {
        "title": "Ticket #6690",
        "trust": 0.8,
        "url": "https://trac.torproject.org/projects/tor/ticket/6690"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.0,
        "url": "https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/releasenotes"
      },
      {
        "trust": 1.6,
        "url": "https://trac.torproject.org/projects/tor/ticket/6690"
      },
      {
        "trust": 1.6,
        "url": "https://lists.torproject.org/pipermail/tor-talk/2012-september/025434.html"
      },
      {
        "trust": 1.6,
        "url": "https://gitweb.torproject.org/tor.git/commit/62d96284f7e0f81c40d5df7e53dd7b4dfe7e56a5"
      },
      {
        "trust": 1.6,
        "url": "http://openwall.com/lists/oss-security/2012/09/13/2"
      },
      {
        "trust": 1.6,
        "url": "http://secunia.com/advisories/50583"
      },
      {
        "trust": 1.1,
        "url": "http://security.gentoo.org/glsa/glsa-201301-03.xml"
      },
      {
        "trust": 1.0,
        "url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html"
      },
      {
        "trust": 1.0,
        "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-september/088006.html"
      },
      {
        "trust": 0.9,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-4419"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-4419"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/bid/55519/info"
      },
      {
        "trust": 0.6,
        "url": "https://trac.torproject.org/projects/tor/ticket/6811"
      },
      {
        "trust": 0.6,
        "url": "http://secunia.com/advisories/50578"
      },
      {
        "trust": 0.3,
        "url": "https://lists.torproject.org/pipermail/tor-talk/2012-september/025501.html"
      },
      {
        "trust": 0.3,
        "url": "https://www.torproject.org/index.html.en"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3519"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4419"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3518"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3517"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-5573"
      },
      {
        "trust": 0.2,
        "url": "http://secunia.com/vulnerability_intelligence/"
      },
      {
        "trust": 0.2,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.2,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.2,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      },
      {
        "trust": 0.2,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.2,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.2,
        "url": "http://secunia.com/blog/325/"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-2769"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3518"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-2768"
      },
      {
        "trust": 0.1,
        "url": "https://wiki.mageia.org/en/support/advisories/mgasa-2012-0276"
      },
      {
        "trust": 0.1,
        "url": "http://www.mandriva.com/en/support/security/"
      },
      {
        "trust": 0.1,
        "url": "https://wiki.mageia.org/en/support/advisories/mgaa-2012-0184"
      },
      {
        "trust": 0.1,
        "url": "http://www.mandriva.com/en/support/security/advisories/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-2768"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-5573"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3519"
      },
      {
        "trust": 0.1,
        "url": "https://wiki.mageia.org/en/support/advisories/mgasa-2012-0356"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-2769"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3517"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4922"
      },
      {
        "trust": 0.1,
        "url": "http://creativecommons.org/licenses/by-sa/2.5"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3517"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5573"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3519"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4922"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3518"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4419"
      },
      {
        "trust": 0.1,
        "url": "http://security.gentoo.org/"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.gentoo.org."
      },
      {
        "trust": 0.1,
        "url": "http://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "http://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=50583"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/50583/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/50583/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://www.debian.org/security/2012/dsa-2548"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=50578"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/50578/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/50578/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "db": "PACKETSTORM",
        "id": "121258"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "db": "PACKETSTORM",
        "id": "116520"
      },
      {
        "db": "PACKETSTORM",
        "id": "116554"
      },
      {
        "db": "PACKETSTORM",
        "id": "116570"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "db": "PACKETSTORM",
        "id": "121258"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "db": "PACKETSTORM",
        "id": "116520"
      },
      {
        "db": "PACKETSTORM",
        "id": "116554"
      },
      {
        "db": "PACKETSTORM",
        "id": "116570"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-09-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "date": "2012-09-12T00:00:00",
        "db": "BID",
        "id": "55519"
      },
      {
        "date": "2012-09-19T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "date": "2013-04-11T02:39:54",
        "db": "PACKETSTORM",
        "id": "121258"
      },
      {
        "date": "2013-01-09T02:25:38",
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "date": "2012-09-14T01:52:39",
        "db": "PACKETSTORM",
        "id": "116520"
      },
      {
        "date": "2012-09-14T04:04:24",
        "db": "PACKETSTORM",
        "id": "116554"
      },
      {
        "date": "2012-09-17T09:28:58",
        "db": "PACKETSTORM",
        "id": "116570"
      },
      {
        "date": "2012-09-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      },
      {
        "date": "2012-09-14T18:55:04.917000",
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-09-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "date": "2015-04-13T20:56:00",
        "db": "BID",
        "id": "55519"
      },
      {
        "date": "2012-11-15T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      },
      {
        "date": "2012-09-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      },
      {
        "date": "2025-04-11T00:51:21.963000",
        "db": "NVD",
        "id": "CVE-2012-4419"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "121258"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Tor of  or/policies.c Service disruption in  (DoS) Vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004415"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "lack of information",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-318"
      }
    ],
    "trust": 0.6
  }
}

VAR-201209-0470

Vulnerability from variot - Updated: 2025-04-11 22:49

The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419. Tor (The Onion Router) is an implementation of the second generation of onion routing, which allows users to communicate anonymously over the Internet. Tor is prone to multiple denial-of-service vulnerabilities. Exploiting these issues can allow attackers to crash the affected computer, denying service to legitimate users. Versions prior to Tor 0.2.2.39 and 0.2.3.22-rc are vulnerable. The title and technical details have been changed to better reflect the underlying component affected. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201301-03

                                        http://security.gentoo.org/

Severity: Normal Title: Tor: Multiple vulnerabilities Date: January 08, 2013 Bugs: #432188, #434882, #444804 ID: 201301-03

Synopsis

Multiple vulnerabilities have been found in Tor, allowing attackers to cause Denial of Service or obtain sensitive information.

Affected packages

-------------------------------------------------------------------
 Package              /     Vulnerable     /            Unaffected
-------------------------------------------------------------------

1 net-misc/tor < 0.2.3.25 >= 0.2.3.25

Description

Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details.

Workaround

There is no known workaround at this time.

Resolution

All Tor users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/tor-0.2.3.25"

References

[ 1 ] CVE-2012-3517 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3517 [ 2 ] CVE-2012-3518 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3518 [ 3 ] CVE-2012-3519 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3519 [ 4 ] CVE-2012-4419 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4419 [ 5 ] CVE-2012-4922 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4922 [ 6 ] CVE-2012-5573 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5573

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201301-03.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

License

The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201209-0470",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.0.9.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.10"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.0.9.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.0.9.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.0.9.7"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.0.9.9"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.12"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.0.9.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.1.0.11"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "torproject",
        "version": "0.0.9.8"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.0.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.31"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.4"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.0.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.22"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.26"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.23"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.28"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.37"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.15"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.17"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.0.13"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.35"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.19"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.6.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.6"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.30"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.31"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.24"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.24"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.25"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.0.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.3"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.6.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.2"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.7"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.20"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.36"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.8.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.34"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.5"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.34"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.21"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.22"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.2.18"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.0.9.1"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.32"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.32"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.29"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.27"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.25"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.33"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.18"
      },
      {
        "model": "tor",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.38"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.35"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.0.16"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.33"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.3.14"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.0.30"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.18"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.2.2.26"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "torproject",
        "version": "0.1.1.20"
      },
      {
        "model": "tor",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "the tor",
        "version": "0.2.3.x"
      },
      {
        "model": "tor",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "the tor",
        "version": "0.2.3.22-rc"
      },
      {
        "model": "hat fedora",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "red",
        "version": "13"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:torproject:tor",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Reported by the vendor",
    "sources": [
      {
        "db": "BID",
        "id": "55519"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2012-4922",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2012-4922",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.1,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2012-7649",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2012-4922",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2012-4922",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2012-7649",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201209-319",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2012-4922",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419. Tor (The Onion Router) is an implementation of the second generation of onion routing, which allows users to communicate anonymously over the Internet. Tor is prone to multiple denial-of-service vulnerabilities. \nExploiting these issues can allow attackers to crash the affected computer, denying service to legitimate users. \nVersions prior to Tor 0.2.2.39 and 0.2.3.22-rc are vulnerable. The title and technical details have been changed to better reflect the underlying component affected. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory                           GLSA 201301-03\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n                                            http://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n    Title: Tor: Multiple vulnerabilities\n     Date: January 08, 2013\n     Bugs: #432188, #434882, #444804\n       ID: 201301-03\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in Tor, allowing attackers to\ncause Denial of Service or obtain sensitive information. \n\nAffected packages\n=================\n\n    -------------------------------------------------------------------\n     Package              /     Vulnerable     /            Unaffected\n    -------------------------------------------------------------------\n  1  net-misc/tor                \u003c 0.2.3.25               \u003e= 0.2.3.25\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in Tor. Please review the\nCVE identifiers referenced below for details. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Tor users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=net-misc/tor-0.2.3.25\"\n\nReferences\n==========\n\n[ 1 ] CVE-2012-3517\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3517\n[ 2 ] CVE-2012-3518\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3518\n[ 3 ] CVE-2012-3519\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3519\n[ 4 ] CVE-2012-4419\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4419\n[ 5 ] CVE-2012-4922\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4922\n[ 6 ] CVE-2012-5573\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5573\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201301-03.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2013 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-4922"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      }
    ],
    "trust": 2.61
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2012-4922",
        "trust": 2.9
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2012/09/12/5",
        "trust": 1.7
      },
      {
        "db": "BID",
        "id": "55519",
        "trust": 1.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649",
        "trust": 0.6
      },
      {
        "db": "MLIST",
        "id": "[TOR-TALK] 20120912 TOR 0.2.3.22-RC IS OUT",
        "trust": 0.6
      },
      {
        "db": "MLIST",
        "id": "[OSS-SECURITY] 20120912 CVE ID REQUEST: TOR",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2012-4922",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "119351",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "id": "VAR-201209-0470",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      }
    ],
    "trust": 0.06
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      }
    ]
  },
  "last_update_date": "2025-04-11T22:49:24.277000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "openSUSE-SU-2012:1278",
        "trust": 0.8,
        "url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html"
      },
      {
        "title": "Fix assertion failure in tor_timegm.",
        "trust": 0.8,
        "url": "https://gitweb.torproject.org/tor.git/commit/973c18bf0e84d14d8006a9ae97fde7f7fb97e404"
      },
      {
        "title": "[tor-talk] Tor 0.2.3.22-rc is out",
        "trust": 0.8,
        "url": "https://lists.torproject.org/pipermail/tor-talk/2012-September/025501.html"
      },
      {
        "title": "[tor.git] / ReleaseNotes (bump to 0.2.2.39)",
        "trust": 0.8,
        "url": "https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes"
      },
      {
        "title": "Ticket #6811",
        "trust": 0.8,
        "url": "https://trac.torproject.org/projects/tor/ticket/6811"
      },
      {
        "title": "calligra-2.5.4",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=44847"
      },
      {
        "title": "radamsa-Fuzzer",
        "trust": 0.1,
        "url": "https://github.com/sunzu94/radamsa-Fuzzer "
      },
      {
        "title": "RADAMSA",
        "trust": 0.1,
        "url": "https://github.com/StephenHaruna/RADAMSA "
      },
      {
        "title": "radamsa",
        "trust": 0.1,
        "url": "https://github.com/Hwangtaewon/radamsa "
      },
      {
        "title": "radamsa",
        "trust": 0.1,
        "url": "https://github.com/benoit-a/radamsa "
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-20",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://trac.torproject.org/projects/tor/ticket/6811"
      },
      {
        "trust": 2.0,
        "url": "https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/releasenotes"
      },
      {
        "trust": 2.0,
        "url": "https://lists.torproject.org/pipermail/tor-talk/2012-september/025501.html"
      },
      {
        "trust": 1.7,
        "url": "https://gitweb.torproject.org/tor.git/commit/973c18bf0e84d14d8006a9ae97fde7f7fb97e404"
      },
      {
        "trust": 1.7,
        "url": "http://openwall.com/lists/oss-security/2012/09/12/5"
      },
      {
        "trust": 1.2,
        "url": "http://security.gentoo.org/glsa/glsa-201301-03.xml"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-september/088006.html"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-4922"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-4922"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/bid/55519/info"
      },
      {
        "trust": 0.3,
        "url": "https://www.torproject.org/index.html.en"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/20.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.securityfocus.com/bid/55519"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/sunzu94/radamsa-fuzzer"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4922"
      },
      {
        "trust": 0.1,
        "url": "http://creativecommons.org/licenses/by-sa/2.5"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3517"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3517"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5573"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3519"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4419"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3518"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3519"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4922"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3518"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-5573"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4419"
      },
      {
        "trust": 0.1,
        "url": "http://security.gentoo.org/"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.gentoo.org."
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "db": "BID",
        "id": "55519"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-09-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "date": "2012-09-14T00:00:00",
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "date": "2012-09-12T00:00:00",
        "db": "BID",
        "id": "55519"
      },
      {
        "date": "2012-09-19T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "date": "2013-01-09T02:25:38",
        "db": "PACKETSTORM",
        "id": "119351"
      },
      {
        "date": "2012-09-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      },
      {
        "date": "2012-09-14T18:55:04.980000",
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-09-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7649"
      },
      {
        "date": "2013-08-22T00:00:00",
        "db": "VULMON",
        "id": "CVE-2012-4922"
      },
      {
        "date": "2015-04-13T20:56:00",
        "db": "BID",
        "id": "55519"
      },
      {
        "date": "2012-11-15T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      },
      {
        "date": "2012-09-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      },
      {
        "date": "2025-04-11T00:51:21.963000",
        "db": "NVD",
        "id": "CVE-2012-4922"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Tor of  common/util.c Service disruption in  (DoS) Vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004416"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "input validation",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201209-319"
      }
    ],
    "trust": 0.6
  }
}

Find a vulnerability

Search criteria

112 vulnerabilities by torproject

CVE-2026-77642 (GCVE-0-2026-77642)

CVE-2026-77641 (GCVE-0-2026-77641)

CVE-2026-77640 (GCVE-0-2026-77640)

CVE-2026-77639 (GCVE-0-2026-77639)

CVE-2026-77638 (GCVE-0-2026-77638)

CVE-2026-77587 (GCVE-0-2026-77587)

CVE-2026-77584 (GCVE-0-2026-77584)

CVE-2026-44603 (GCVE-0-2026-44603)

CVE-2026-44602 (GCVE-0-2026-44602)

CVE-2026-44601 (GCVE-0-2026-44601)

CVE-2026-44600 (GCVE-0-2026-44600)

CVE-2026-44599 (GCVE-0-2026-44599)

CVE-2026-44597 (GCVE-0-2026-44597)

CVE-2026-77642 (GCVE-0-2026-77642)

CVE-2026-77641 (GCVE-0-2026-77641)

CVE-2026-77640 (GCVE-0-2026-77640)

CVE-2026-77639 (GCVE-0-2026-77639)

CVE-2026-77638 (GCVE-0-2026-77638)

CVE-2026-77587 (GCVE-0-2026-77587)

CVE-2026-77584 (GCVE-0-2026-77584)

CVE-2026-44603 (GCVE-0-2026-44603)

CVE-2026-44602 (GCVE-0-2026-44602)

CVE-2026-44601 (GCVE-0-2026-44601)

CVE-2026-44600 (GCVE-0-2026-44600)

CVE-2026-44599 (GCVE-0-2026-44599)

CVE-2026-44597 (GCVE-0-2026-44597)

VAR-201709-0618

VAR-201402-0034

VAR-201209-0412

Synopsis

Affected packages

Description

Workaround

Resolution

References

Availability

Concerns?

License

VAR-201209-0470

Synopsis

Affected packages

Description

Workaround

Resolution

References

Availability

Concerns?

License