232 matches found
DEBIAN-CVE-2012-3518
The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...
CVE-2012-3518
The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...
CVE-2012-3519
CVE-2012-3519 affects Tor; routerlist.c in Tor before 0.2.2.38 uses different timing for relay-list iteration, enabling a timing side-channel to leak information about relay selection. Public discussion items in Debian/OSS advisories confirm the vulnerability and that the OpenBSD/OpenSSL-style fi...
CVE-2011-4895
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...
DEBIAN-CVE-2011-2768
Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had...
CVE-2011-2769
Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATEFAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values...
CVE-2011-1924
Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...
DEBIAN-CVE-2011-1924
Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...
CVE-2011-0493
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a denial of service assertion failure and daemon exit via vectors related to malformed router caches and improper handling of integer values...
CVE-2011-0493
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a denial of service assertion failure and daemon exit via vectors related to malformed router caches and improper handling of integer values...
CVE-2011-0492
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service assertion failure and daemon exit via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file...
CVE-2011-0490
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...
DEBIAN-CVE-2011-0427
Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors...
CVE-2011-0492
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service assertion failure and daemon exit via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file...
CVE-2010-1676
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...
CVE-2010-0385
Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query...
CVE-2009-2426
The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...
DEBIAN-CVE-2009-0939
Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...