tor vulnerabilities

Recent CVEs affecting tor products. 56 tracked.

tor has 56 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 30. Most recent: 2012-08-26. Highest priority: CVE-2009-0414 (score 62/100).

• CVE-2012-3519 MEDIUM 5.0 UPGRADE routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on whic
• CVE-2012-3518 MEDIUM 5.0 UPGRADE The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly ha
• CVE-2012-3517 MEDIUM 5.0 UPGRADE Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of
• CVE-2011-4897 MEDIUM 4.3 UPGRADE Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the loca
• CVE-2011-4896 MEDIUM 4.3 UPGRADE Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not curren
• CVE-2011-4895 MEDIUM 4.3 UPGRADE Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the proces
• CVE-2011-4894 MEDIUM 4.3 UPGRADE Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection f
• CVE-2011-2778 HIGH 7.6 UPGRADE Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of servic
• CVE-2011-2769 MEDIUM 4.3 UPGRADE Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command fie
• CVE-2011-2768 MEDIUM 5.8 UPGRADE Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoi
• CVE-2011-1924 MEDIUM 5.0 UPGRADE Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attacke
• CVE-2011-0493 MEDIUM 5.0 UPGRADE Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a denial of servic
• CVE-2011-0492 MEDIUM 5.0 UPGRADE Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (as
• CVE-2011-0491 MEDIUM 5.0 UPGRADE The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain
• CVE-2011-0490 MEDIUM 5.0 UPGRADE Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, wh
• CVE-2011-0427 MEDIUM 6.8 UPGRADE Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to
• CVE-2011-0016 LOW 2.1 UPGRADE Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might
• CVE-2011-0015 MEDIUM 5.0 UPGRADE Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zli
• CVE-2010-1676 HIGH 10.0 UPGRADE Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to
• CVE-2010-0385 MEDIUM 5.0 DOWNGRADE Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allow
• CVE-2010-0384 LOW 2.1 DOWNGRADE Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the clie
• CVE-2010-0383 MEDIUM 5.0 DOWNGRADE Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory aut
• CVE-2009-2426 MEDIUM 5.0 DOWNGRADE The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.
• CVE-2009-2425 MEDIUM 5.0 DOWNGRADE Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed r
• CVE-2009-0939 HIGH 10.0 UPGRADE Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors rel
• CVE-2009-0938 MEDIUM 5.0 UPGRADE Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit n
• CVE-2009-0937 MEDIUM 5.0 UPGRADE Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unk
• CVE-2009-0936 MEDIUM 5.0 UPGRADE Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop)
• CVE-2009-0654 MEDIUM 5.1 UPGRADE Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and
• CVE-2009-0414 HIGH 10.0 UPGRADE Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger
• CVE-2008-5398 HIGH 9.3 UPGRADE Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in sit
• CVE-2008-5397 HIGH 7.2 UPGRADE Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might al
• CVE-2007-4174 MEDIUM 5.8 UPGRADE Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051,
• CVE-2007-4099 MEDIUM 5.8 DOWNGRADE Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, whic
• CVE-2007-4098 MEDIUM 5.8 DOWNGRADE Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote a
• CVE-2007-4097 MEDIUM 6.4 DOWNGRADE Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remot
• CVE-2007-4096 MEDIUM 5.8 DOWNGRADE Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to cause a denial
• CVE-2007-3165 MEDIUM 5.0 DOWNGRADE Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, whi
• CVE-2007-1103 MEDIUM 4.3 UPGRADE Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a
• CVE-2006-6893 MEDIUM 5.0 DOWNGRADE Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high
• CVE-2006-4508 MEDIUM 4.0 UPGRADE DOWNGRADE Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat
• CVE-2006-3419 MEDIUM 5.0 DOWNGRADE Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong R
• CVE-2006-3418 MEDIUM 5.0 DOWNGRADE Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, wh
• CVE-2006-3417 MEDIUM 6.4 DOWNGRADE Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote
• CVE-2006-3416 MEDIUM 5.0 DOWNGRADE Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network cir
• CVE-2006-3415 MEDIUM 6.4 DOWNGRADE Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to per
• CVE-2006-3414 MEDIUM 5.0 DOWNGRADE Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows r
• CVE-2006-3413 MEDIUM 5.0 DOWNGRADE The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile"
• CVE-2006-3412 MEDIUM 6.4 DOWNGRADE Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypa
• CVE-2006-3411 MEDIUM 6.4 DOWNGRADE TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connec
• CVE-2006-3410 MEDIUM 5.0 DOWNGRADE Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which
• CVE-2006-3409 HIGH 7.5 DOWNGRADE Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large in
• CVE-2006-3408 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers t
• CVE-2006-3407 MEDIUM 6.4 DOWNGRADE Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings wi
• CVE-2006-0414 MEDIUM 5.0 DOWNGRADE Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attemp
• CVE-2005-2050 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key

FAQ

How do I fix tor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tor being exploited right now?

None of the tracked tor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tor CVE should I patch first?

CVE-2009-0414 currently ranks highest (62/100): Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger.

Products

• tor

RSS feed for tor · ← Back to latest CVEs