CVE-2009-0936
published 2009-03-18CVE-2009-0936: Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes."
PriorityP416medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.71%
74.8th percentile
Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes."
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tor | < tor 0.2.0.34-1 (bookworm) | tor 0.2.0.34-1 (bookworm) |
| tor | tor | <= 0.2.0.33 | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2009-0936: tor - Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a den...
vendor_debian·2009·CVSS 5.0
CVE-2009-0936 [MEDIUM] CVE-2009-0936: tor - Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a den...
Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes."
Scope: local
bookworm: resolved (fixed in 0.2.0.34-1)
bullseye: resolved (fixed in 0.2.0.34-1)
forky: resolved (fixed in 0.2.0.34-1)
sid: resolved (fixed in 0.2.0.34-1)
trixie: resolved (fixed in 0.2.0.34-1)
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
vendor_redhat·CVSS 5.0
CVE-2009-0938 [MEDIUM] tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
vendor_redhat·CVSS 5.0
CVE-2009-0937 [MEDIUM] tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors.
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
vendor_redhat·CVSS 5.0
CVE-2009-0936 [MEDIUM] tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes."
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
vendor_redhat·CVSS 5.0
CVE-2009-0939 [MEDIUM] tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)
Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0.
GHSA
GHSA-99vh-r3f2-2r35: Unspecified vulnerability in Tor before 0
ghsa_unreviewed·2022-05-02
CVE-2009-0936 [MEDIUM] GHSA-99vh-r3f2-2r35: Unspecified vulnerability in Tor before 0
Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes."
OSV
CVE-2009-0936: Unspecified vulnerability in Tor before 0
osv·2009-03-18·CVSS 5.0
CVE-2009-0936 [MEDIUM] CVE-2009-0936: Unspecified vulnerability in Tor before 0
Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes."
No detection rules found.
No public exploits indexed.
http://archives.seul.org/or/announce/Feb-2009/msg00000.htmlhttp://secunia.com/advisories/33880http://secunia.com/advisories/34583http://security.gentoo.org/glsa/glsa-200904-11.xmlhttp://www.securityfocus.com/bid/33713http://archives.seul.org/or/announce/Feb-2009/msg00000.htmlhttp://secunia.com/advisories/33880http://secunia.com/advisories/34583http://security.gentoo.org/glsa/glsa-200904-11.xmlhttp://www.securityfocus.com/bid/33713
2009-03-18
Published