CVE-2009-0936 — Infinite Loop in TOR

10 documents7 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 33.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Torproject TORTOR
Timeline
PublishedMar 18
Latest updateMay 2

Description

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶Debiantorproject/tor< 0.2.0.34-1+3
▶NVDtor/tor0.2.0.33+29

Patches

Patch: archives.seul.org ↗Patch: archives.seul.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-99vh-r3f2-2r35: Unspecified vulnerability in Tor before 0↗2022-05-02
▶
OSV
CVE-2009-0936: Unspecified vulnerability in Tor before 0↗2009-03-18
▶
CVEList
CVE-2009-0936: Unspecified vulnerability in Tor before 0↗2009-03-18
▶

📋Vendor Advisories

5
Debian
CVE-2009-0936: tor - Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a den...↗2009
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶

💬Community

1
Bugzilla
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗2009-02-11
▶
CVE-2009-0936 — Infinite Loop in TOR | cvebase